Active Scanning
Techniques that directly probe, crawl or scan a target system, network or website.
Amass
In-depth attack-surface mapping and asset discovery via DNS enumeration and network recon.
Open source
Masscan
Internet-scale TCP port scanner able to sweep huge address ranges very fast.
Open source
Nmap
Free network scanner for host discovery, port scanning and service/OS detection.
Open source
Photon
Fast crawler that extracts URLs, emails, files and other data points from a website.
Open source