Resolution
- http://dnsbin.zhack.ca (DNS)
- http://pingb.in (DNS)
- https://www.mockbin.org/ (HTTP)
Wildcard DNS
10.0.0.1.xip.io
www.10.0.0.1.xip.io
mysite.10.0.0.1.xip.io
foo.bar.10.0.0.1.xip.io
10.0.0.1.nip.io
app.10.0.0.1.nip.io
customer1.app.10.0.0.1.nip.io
customer2.app.10.0.0.1.nip.io
otherapp.10.0.0.1.nip.io
Reconnaissance
- https://spyse.com (fully-fledged recon service)
- https://dnsdumpster.com (DNS and subdomain recon)
- Reverse IP Lookup (Domainmonitor)
- Security headers (Security Report, missing headers)
- http://threatcrowd.org (WHOIS, DNS, email, and subdomain recon)
- https://mxtoolbox.com (wide range of DNS-related recon tools)
- https://publicwww.com/ (Source Code Search Engine)
- http://ipv4info.com/ (Find domains in the IP block owned by a Company/Organization)
- HackerTarget Tools (DNS recon, site lookup, and scanning tools)
- VirusTotal (WHOIS, DNS, and subdomain recon)
- crt.sh (SSL certificate search)
- Google CT (SSL certificate transparency search)
- PenTest Tools (Google dorks)
- Wayback Machine (Find stuff which was hosted on the domain in past)
- FindSubdomains (Find subdomains using domain or keywords)
Report Templates