Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

DNS & Subdomain Enumeration

Tools for discovering subdomains and DNS records associated with target domains.

NewestRelevanceMost popularRecently updated
207 results
htrace.sh preview

htrace.sh

GitHubtrimstray/htrace.sh

My simple Swiss Army knife for http/https troubleshooting and profiling.

vulnerability-scannersdns-subdomain-enumerationinformation-gathering+3
3.9k
1 year ago
Findomain preview

Findomain

GitHubfindomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

osintreconnaissancedns-subdomain-enumeration+2
3.8k29 days ago
massdns preview

massdns

GitHubblechschmidt/massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

osintreconnaissancedns-subdomain-enumeration+2
3.6k4 months ago
subbrute preview

subbrute

GitHubtherook/subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

osintreconnaissancedns-subdomain-enumeration+2
3.5k9 years ago
pentest-tools preview

pentest-tools

GitHubgwen001/pentest-tools

A collection of custom security tools for quick needs.

osintreconnaissancevulnerability-scanners+7
3.3k3 years ago
datasploit preview

datasploit

GitHubdatasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

osintreconnaissancepassword-attacks+6
3.3k9 months ago
dnsrecon preview

dnsrecon

GitHubdarkoperator/dnsrecon

DNS Enumeration Script

reconnaissancedns-subdomain-enumerationinformation-gathering+3
3.1k4 days ago
uncover preview

uncover

GitHubprojectdiscovery/uncover

Quickly discover exposed hosts on the internet using multiple search engines.

osintreconnaissancedns-subdomain-enumeration+1
3.0k15 days ago
CloudFlair preview

CloudFlair

GitHubchristophetd/cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

reconnaissancedns-subdomain-enumerationinformation-gathering+3
3.0k1 year ago
dnsx preview

dnsx

GitHubprojectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2.8k4 days ago
CloudFail preview

CloudFail

GitHubm0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

osintreconnaissancedns-subdomain-enumeration+5
2.7k2 years ago
dark-web-osint-tools preview

dark-web-osint-tools

GitHubapurvsinghgautam/dark-web-osint-tools

OSINT Tools for the Dark Web

osintreconnaissancevulnerability-scanners+4
2.5k13 days ago
altdns preview

altdns

GitHubinfosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

osintreconnaissancedns-subdomain-enumeration+1
2.5k1 year ago
xray preview
Archived

xray

GitHubevilsocket/xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

osintreconnaissancenetwork-mapping+5
2.3k2 years ago
CloakQuest3r preview

CloakQuest3r

GitHubspyboy-productions/cloakquest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

osintreconnaissancevulnerability-analysis+7
2.2k7 months ago
puredns preview

puredns

GitHubd3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2.2k5 months ago
Reconnoitre preview

Reconnoitre

GitHubcodingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

reconnaissancevulnerability-scannersnetwork-mapping+4
2.2k6 years ago
WireTapper preview

WireTapper

GitHubh9zdev/wiretapper

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

embedded-systems-securityosintreconnaissance+9
1.9k3 months ago
Previous123…12Next