Tool settings (binary names and paths for your machine)
How to read: arrows point from a step to the steps that must run after it.
Green = recon (discovery).
Red = vulnerability assessment.
H = horizontal track (org, ASN, IP ranges, for large scope). V = vertical track (subdomains and assets).
Both tracks merge at the final subdomain list. Chips show the exact file names each step reads (grey) and writes (blue).
Dashed cards are optional. Click a card to light up everything that must run before it and everything that comes after it.
Enter a domain above and press Generate.
Kali Linux has most system packages in apt. On Debian/Ubuntu, the Go tools and some Python tools may need the PATH setting and the --break-system-packages flag shown below. The Python tools in a venv are a cleaner alternative.