Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

DNS & Subdomain Enumeration

Tools for discovering subdomains and DNS records associated with target domains.

NewestRelevanceMost popularRecently updated
207 results
OSINT-Framework preview

OSINT-Framework

GitHublockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

osintreconnaissancedns-subdomain-enumeration+7
11.9k
4 months ago
theHarvester preview

theHarvester

GitHublaramies/theharvester

E-mails, subdomains and names Harvester - OSINT

osintreconnaissancedns-subdomain-enumeration+6
17.0k7h 33m ago
Photon preview

Photon

GitHubs0md3v/photon

Incredibly fast crawler designed for OSINT.

osintreconnaissancedns-subdomain-enumeration+3
13.1k13 days ago
subfinder preview

subfinder

GitHubprojectdiscovery/subfinder

Fast passive subdomain enumeration tool.

osintreconnaissancedns-subdomain-enumeration+4
14.2k10 days ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

osintreconnaissanceosint-social-engineering+7
36.5k9h 16m ago
amass preview

amass

GitHubowasp-amass/amass

In-depth attack surface mapping and asset discovery

osintreconnaissancenetwork-mapping+2
15.0k4 months ago
gobuster preview

gobuster

GitHuboj/gobuster

Directory/File, DNS and VHost busting tool written in Go

dns-subdomain-enumerationinformation-gatheringweb-security+3
14.0k7 months ago
Responder preview

Responder

GitHublgandx/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

password-crackingreconnaissancedns-subdomain-enumeration+8
6.5k2 months ago
rengine preview

rengine

GitHubyogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

osintreconnaissancevulnerability-scanners+9
8.8k9 months ago
dark-web-osint-tools preview

dark-web-osint-tools

GitHubapurvsinghgautam/dark-web-osint-tools

OSINT Tools for the Dark Web

osintreconnaissancevulnerability-scanners+4
2.5k13 days ago
Findomain preview

Findomain

GitHubfindomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

osintreconnaissancedns-subdomain-enumeration+2
3.8k28 days ago
dnsrecon preview

dnsrecon

GitHubdarkoperator/dnsrecon

DNS Enumeration Script

reconnaissancedns-subdomain-enumerationinformation-gathering+3
3.1k4 days ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

osintreconnaissancedns-subdomain-enumeration+5
5.7k1 year ago
CloudFail preview

CloudFail

GitHubm0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

osintreconnaissancedns-subdomain-enumeration+5
2.7k2 years ago
uncover preview

uncover

GitHubprojectdiscovery/uncover

Quickly discover exposed hosts on the internet using multiple search engines.

osintreconnaissancedns-subdomain-enumeration+1
3.0k15 days ago
gau preview

gau

GitHublc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

osintreconnaissancedns-subdomain-enumeration+2
5.1k5 months ago
scan4all preview

scan4all

GitHubghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

password-crackingreconnaissancevulnerability-scanners+9
6.2k2 years ago
dnsx preview

dnsx

GitHubprojectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2.8k4 days ago
Previous12…12Next