Tools used by nahamsec

Amass - Subdomain Generation
ReconFTW - General Recon
FFUF - For fuzzing with onelistforall and onemillion wordlist
MassDNS - DNS Resolver
Security Trails - Subdomain Enumeartion
Shodan - UI version for finding hidden gems
Web Archive - Look for caches
GitHub - Hidden endpoints, subdomains and secrets
HTTPX - Filter live endpoints on the subdomains collections
http://Crt.sh - More info based on certificates
AlienValut - Massive Recon
FOFA - Collect favicon hash