guelfoweb/knockpy

Health v2 · maintenance only

Adoption not part of the score

4178 stars · 873 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

KnockPy is a modular Python 3 CLI tool for enumerating subdomains of a target domain using passive reconnaissance sources and DNS bruteforce, with async scanning via httpx. It validates HTTP/HTTPS status, TLS certificates, and IPs, detects wildcard DNS and legacy TLS, and stores results in SQLite with exportable reports.

Use cases

• enumerate subdomains of a domain for a bug bounty recon
• bruteforce subdomains with a wordlist
• run passive subdomain discovery via VirusTotal and Shodan
• check AXFR zone transfer vulnerabilities on a domain
• detect wildcard DNS and legacy TLS 1.0/1.1 support
• export subdomain scan results to HTML or SQLite reports

When to choose

• you need a fast async Python subdomain scanner for pentest or bug bounty recon
• you want passive recon plus bruteforce in one tool with SQLite reporting
• you need TLS, wildcard DNS, and AXFR checks during subdomain enumeration

When to avoid

• you need a full vulnerability scanner rather than subdomain enumeration
• you require a GUI or web dashboard instead of a CLI
• you need non-DNS asset discovery like port scanning or screenshotting

Facets

cli-tool · maturity active

security penetration-testing http-client cli security penetration-testing developer-tools python cli windows cross-platform subdomain-enumeration recon bugbounty dns bruteforce osint async command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="guelfoweb/knockpy")