Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

DNS & Subdomain Enumeration

Tools for discovering subdomains and DNS records associated with target domains.

NewestRelevanceMost popularRecently updated
207 results
RTA preview

RTA

GitHubflipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

reconnaissancevulnerability-scannersnetwork-mapping+6
4153 years ago
celerystalk preview
Archived

celerystalk

GitHubsethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

reconnaissancevulnerability-scannersnetwork-mapping+8
4005 years ago
domain-protect preview
Archived

domain-protect

GitHubdomain-protect/domain-protect

OWASP Domain Protect - prevent subdomain takeover

reconnaissancevulnerability-scannersdns-subdomain-enumeration+4
3941 year ago
getaltname preview

getaltname

GitHubfranccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
3901 month ago
NtHiM preview

NtHiM

GitHubthebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

vulnerability-scannersdns-subdomain-enumerationweb-security+3
3874 years ago
cloudfrunt preview

cloudfrunt

GitHubmindpointgroup/cloudfrunt

A tool for identifying misconfigured CloudFront domains

vulnerability-scannersdns-subdomain-enumerationcloud-security+1
3628 years ago
dump preview

dump

GitHubs0md3v/dump

Stuff that doesn't deserves its own repository.

osintreconnaissancevulnerability-scanners+6
3591 year ago
SubGPT preview
Archived

SubGPT

GitHubs0md3v/subgpt

Find subdomains with GPT, for free

osintreconnaissancedns-subdomain-enumeration+3
3552 years ago
hawk preview

hawk

GitHubmedpaf/hawk

Network, recon and offensive-security tool for Linux.

packet-sniffing-analysisreconnaissancewi-fi-auditing+7
3302 years ago
EasyEASM preview

EasyEASM

GitHubg0ldencybersec/easyeasm

Zero-dollar attack surface management tool

reconnaissancevulnerability-analysisdns-subdomain-enumeration+7
3282 years ago
sub.sh preview

sub.sh

GitHubcihanmehmet/sub.sh

Multiprocessing(Parallel)Subdomain Detect Script

osintreconnaissancedns-subdomain-enumeration+2
3272 years ago
tldfinder preview

tldfinder

GitHubprojectdiscovery/tldfinder

A streamlined tool for discovering private TLDs for security research.

reconnaissancenetwork-mappingdns-subdomain-enumeration+3
3266 months ago
kanha preview

kanha

GitHubpwnwriter/kanha

🦚 A web-app pentesting suite written in rust .

reconnaissancevulnerability-scannersdns-subdomain-enumeration+5
3241 year ago
OSweep preview

OSweep

GitHubecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

osintphishing-toolsthreat-feeds-aggregators+4
3187 years ago
fierce-domain-scanner preview

fierce-domain-scanner

GitHubdavidpepper/fierce-domain-scanner

Fierce.pl Domain Scanner

reconnaissancenetwork-mappingdns-subdomain-enumeration+1
3039 years ago
Subrake preview

Subrake

GitHubhash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

reconnaissancevulnerability-scannersdns-subdomain-enumeration+4
3003 years ago
Bountystrike-sh preview

Bountystrike-sh

GitHubbountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

reconnaissancevulnerability-scannersnetwork-mapping+7
2913 years ago
Rock-ON preview

Rock-ON

GitHubsilverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

osintreconnaissanceport-scanning+5
2906 years ago
Previous1…567…12Next