List of Awesome Asset Discovery Resources
-
Updated
Jan 22, 2025
#
asset-discovery
Here are 106 public repositories matching this topic...
一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。
python osint mcp cybersecurity nuclei red-team security-tools asset-mapping asset-discovery fastapi fofa fofa-api ai-agent attack-surface-management model-context-protocol
-
Updated
Aug 16, 2026 - Python
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
security asm web-security recon security-automation security-tools defensive-security subdomain-enumeration asset-discovery easm attack-surface-management authorized-security-testing
-
Updated
Sep 21, 2026 - TypeScript
Automated network asset, email, and social media profile discovery and cataloguing.
-
Updated
Jan 6, 2022 - Python
Community curated list of search queries for various products across multiple search engines.
-
Updated
Oct 30, 2026 - Go
Burp Suite extension to discover assets from HTTP response.
-
Updated
Jan 22, 2025 - Python
A command-line tool for discovering subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
go docker golang osint docker-image penetration-testing bug-bounty ethical-hacking reconnaissance red-teaming subdomain-enumeration subdomain-discovery asset-discovery penetration-testing-tools ethical-hacking-tools osint-tools red-team-tools bug-bounty-tools
-
Updated
Oct 27, 2026 - Go
A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.
dns subdomain enumeration penetration-testing bug-bounty pentesting bugbounty subdomains reverse-dns bash-scripting passive-dns reconnaissance subfinder amass asset-discovery subdomains-enumeration reverse-dns-lookup findomain hakrevdns xsubfind3r
-
Updated
Aug 2, 2022 - Shell
Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.
security asm self-hosted web-security recon nuclei vulnerability-management security-tools vulnerability-scanning subdomain-enumeration asset-discovery easm attack-surface-management distributed-scanning
-
Updated
Oct 30, 2026 - Go
WEB-Wordlist-Generator creates related wordlists after scanning your web applications.
ioc cti wordlist-generator cyber-security ethical-hacking security-tools redteam open-source-tooling open-source-software asset-discovery cyber-analytics hack-tool ethical-hacking-tools redteam-tools cyber-security-tool ethical-hacker cyber-security-analysis cyber-analyst blueteam-tools cyber-security-data
-
Updated
May 26, 2024 - Python
企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。
docker osint asm self-hosted cybersecurity recon attack-surface subdomain-enumeration asset-discovery attack-surface-management
-
Updated
Sep 18, 2026 - Shell
A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
security awesome osint cybersecurity penetration-testing infosec awesome-list security-tools threat-intelligence reconnaissance asset-discovery attack-surfaces 2025 attack-surface-managment external-attack-surface
-
Updated
Jan 13, 2026
A micro-framework and tool for performing reconnaissance.
bug-bounty recon hacktoberfest network-scanning dirbuster reconnaissance directory-bruteforce hacking-tools subdomain-enumeration subdomain-bruteforcing asset-discovery subdomain-finder recon-engine recon-framework
-
Updated
Jan 15, 2026 - Ruby
Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists.
ioc cti malicious-domains cyber-security security-tools threat-intelligence hacking-tools malicious-url cyber-threat-intelligence malicious-url-detection asset-discovery ethical-hacking-tools cyber-intelligence malicious-link cyber-threat-hunting malicious-ips cyber-analyst
-
Updated
Aug 31, 2023 - Python
A simple reconnaissance framework for bug bounty hunting
-
Updated
Oct 16, 2020 - Shell
yublueflower is a security workflow to discover real-world threats using open-source tools such as urlfinder, katana, httpx, nuclei, and glow, with findings mapped to CWE and CVE using matcher patterns.
bash crawler bugbounty offensive-security security-researcher asset-discovery yublueflower security-workflow
-
Updated
Oct 15, 2026 - Shell
An subdomain enumerator for web URLs using the power of Goroutines.
intelligence penetration-testing bugbounty reconnaissance subdomain-scanner subdomain-brute subdomain-enumeration pentesting-tools subdomain-discovery asset-discovery subdomain-finder redteam-tools
-
Updated
Sep 3, 2023 - Go
SRC 资产测绘编排流水线:企业实体图谱(ENScan) → 主动测绘(subfinder/dnsx/naabu/httpx 4 阶段) → 每日增量 diff → 本地可视化 dashboard;基于 SQLite 串联,Apache-2.0 开源,信息收集场景专用。
-
Updated
Oct 5, 2026 - Python
Open-source, self-hosted external attack-surface management (EASM). Continuous discovery + 28 detection modules, the exact request behind every finding, and a visual Playground. Detection only.
osint self-hosted cybersecurity bug-bounty web-security recon nuclei security-scanner security-tools devsecops reconnaissance vulnerability-scanner attack-surface subdomain-enumeration asset-discovery continuous-monitoring easm projectdiscovery attack-surface-management external-attack-surface-management
-
Updated
Oct 19, 2026 - Python
XML sitemap discovery for websites in your terminal.
bash sitemap osint seo enumeration shell-script recon xml-sitemap bash-script sitemap-files sitemaps sitemap-check reconnaissance asset-discovery osint-tool xml-sitemaps
-
Updated
May 3, 2026 - Shell
Add this topic to your repo
To associate your repository with the asset-discovery topic, visit your repo's landing page and select "manage topics."