Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

DNS & Subdomain Enumeration

Tools for discovering subdomains and DNS records associated with target domains.

NewestRelevanceMost popularRecently updated
207 results
sandmap preview

sandmap

GitHubtrimstray/sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

reconnaissancevulnerability-scannersnetwork-mapping+6
1.9k1 year ago
fierce preview

fierce

GitHubmschwager/fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

reconnaissancenetwork-mappingdns-subdomain-enumeration+2
1.8k1 year ago
metabigor preview

metabigor

GitHubj3ssie/metabigor

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

osintreconnaissancenetwork-mapping+6
1.7k12 days ago
shuffledns preview

shuffledns

GitHubprojectdiscovery/shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…

reconnaissancedns-subdomain-enumerationinformation-gathering+1
1.7k7 months ago
ATSCAN preview

ATSCAN

GitHubalisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

osintvulnerability-scannersencryption-decryption-tools+7
1.6k2 years ago
GooFuzz preview

GooFuzz

GitHubm3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

osintreconnaissancedns-subdomain-enumeration+3
1.6k8 months ago
V3n0M-Scanner preview

V3n0M-Scanner

GitHubv3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

vulnerability-scannersexploit-frameworksdns-subdomain-enumeration+3
1.6k3 years ago
BigBountyRecon preview

BigBountyRecon

GitHubviralmaniar/bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…

osintreconnaissancevulnerability-analysis+6
1.6k5 years ago
OSINT-SPY preview

OSINT-SPY

GitHubsharadkumar97/osint-spy

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

osintreconnaissancevulnerability-scanners+5
1.5k6 years ago
007-TheBond preview

007-TheBond

GitHubdeadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

osintreconnaissancedns-subdomain-enumeration+5
1.5k1 month ago
numa preview

numa

GitHubrazvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

encryption-decryption-toolsdns-subdomain-enumerationnetwork-security+3
1.4k15h 49m ago
Watcher preview

Watcher

GitHubthalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

osintvulnerability-analysisdns-subdomain-enumeration+7
1.4k29 days ago
VHostScan preview

VHostScan

GitHubcodingo/vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…

reconnaissancevulnerability-scannersdns-subdomain-enumeration+3
1.3k1 year ago
go-dork preview

go-dork

GitHubdwisiswant0/go-dork

The fastest dork scanner written in Go.

osintvulnerability-scannersdns-subdomain-enumeration+2
1.3k2 years ago
kamerka preview
Archived

kamerka

GitHubwoj-ciech/kamerka

Build interactive map of cameras from Shodan

osintreconnaissanceiot-security+5
1.3k6 years ago
scilla preview

scilla

GitHubedoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

reconnaissanceport-scanningdns-subdomain-enumeration+4
1.2k1 month ago
Maryam preview
Archived

Maryam

GitHubsaeeddhqan/maryam

Maryam: Open-source Intelligence(OSINT) Framework

osintreconnaissancedns-subdomain-enumeration+2
1.2k1 year ago
fav-up preview

fav-up

GitHubpielco11/fav-up

Shodan-powered tool to discover real IP addresses behind Cloudflare by hashing favicon icons using MurmurHash3, enabling origin server identification…

osintreconnaissancenetwork-mapping+2
1.2k1 year ago
Previous1234…12Next