What is haxder?

HaXder is a command line tool built for penetration testers and security teams who need to map out everything a company exposes on the internet under a given domain name. Instead of guessing, it combines several discovery methods and then checks each result to confirm it is real and reachable, so the final output is a short, trustworthy list rather than a pile of unverified guesses. It starts by pulling candidate subdomains from more than a dozen public and paid data sources, including services like Shodan, VirusTotal, and crt.sh, along with the Wayback Machine's historical records. It can also expand that list by guessing common subdomain names from a wordlist and by trying variations like adding dev- or staging- in front of known names. Every candidate is then checked with real DNS lookups, filtering out fake matches caused by wildcard DNS records, and the survivors are probed over HTTP to capture their status codes, page titles, and any missing security headers. Beyond plain discovery, HaXder can flag subdomains that are at risk of takeover, meaning a subdomain still points to a cloud service, like an old S3 bucket or GitHub Pages site, that nobody controls anymore. It can also scan JavaScript files pulled from historical pages for leaked API keys, check a domain's email security settings, and run simple YAML-based checks for common misconfigurations. For larger jobs, one machine can act as a coordinator while other machines run as workers and report their findings back to it. Results can be viewed in a styled terminal interface, exported as JSON or CSV, saved as a self-contained HTML report with charts and tables, or sent automatically to Slack or Discord when a scan finishes. It is built in Python using asyncio for concurrency and is released under the MIT license.