SubHunter is a fast and concurrent tool to discover subdomains, detect open ports, and identify service providers. It also detects whether a domain is behind a CDN, helping security researchers and network engineers map the real infrastructure behind a target domain.

Makes HTTP requests to URLs and parses response headers to determine caching behaviour

🃏 Rankle - Web Infrastructure Reconnaissance Tool. Enhanced CMS/CDN/WAF detection, DNS enumeration, TLS analysis. 100% Open Source, no API keys required.

A next-generation Firewall, CDN & WAF Fingerprinting Framework for Security Researchers, Bug Hunters, and Penetration Testers.