DNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
Update: Data now includes results with banners for HTTP, FTP, SSH and Telnet. Note that the banners and host names are from Internet Scanning data sets and are not collected live. This means your target does not know you are looking.
Map an organizations attack surface with a virtual dumpster dive* of the DNS records associated with the target organization.
*DUMPSTER DIVING: The practice of sifting refuse from an office or technical installation to extract confidential data, especially security-compromising information.
Head over to HackerTarget.com for access to the domain profiler tool. Enumerate a domain and pull back an XLS with up to 40K subdomains. Get the edge whether you are chasing bug bounties, red teaming a new target or mapping your attack surface.
Membership includes 9 vulnerabiltiy scanning tools.
Trusted tools hosted for remote easy access.
More than a simple DNS lookup this tool will discover those hard to find sub-domains and web hosts. No brute force of common sub-domains is undertaken as is common practice for many DNS recon tools. The search relies on data from search engines and the excellent scans.io and censys.io research projects.