Skip to content

NexurAI

NexurAI

Blue-team labs for defenders. Investigate real evidence, submit findings, and climb the ranks.

Train

Labs
Paths
Challenges
Investigations
Pro Range

Compete

Leaderboard
Seasons
Campaigns

Learn

Learning Hub
Glossary
Tools Directory
CVE Center
Threat Briefings

Community

Teams
Certifications
Pricing

Company

For Institutions
Contact

© NexurAI · blue-team labs

Contact Terms Privacy Character art: DiceBear

Tools Directory/Reconnaissance

🛰️Reconnaissance

chaos-client

Official

Query ProjectDiscovery's Chaos dataset of subdomains.

BeginnerOpen SourceLinuxWindowsmacOS

Used for:ReconnaissanceOSINT

Visit official site

Practice this on NexurAI

Start the SOC Analyst track

Related Reconnaissance tools

The de-facto network scanner for host discovery, port scanning and service/OS fingerprinting.

Internet-scale TCP port scanner that can sweep huge ranges extremely fast.

OWASP in-depth attack-surface mapping and subdomain enumeration.

Fast passive subdomain discovery using many public sources.

Fast, multi-purpose HTTP toolkit for probing live web servers.

Fast SYN/CONNECT port scanner focused on reliability and simplicity.

Link goes to the official source. We never mirror or host binaries. Use only on systems you own or are authorized to test.