Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
DNS & Subdomain Enumeration | Kitploit
Categories

DNS & Subdomain Enumeration

Tools for discovering subdomains and DNS records associated with target domains.

NewestRelevanceMost popularRecently updated
207 results
TLDHunt preview

TLDHunt

GitHubyuyudhn/tldhunt

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

osintphishing-toolsdns-subdomain-enumeration+2
187
1 year ago
indicator-intelligence preview

indicator-intelligence

GitHubosmankandemir/indicator-intelligence

Collects static files from target domains to discover related domains and IPv4 addresses for threat intelligence and IOC enrichment.

osintdns-subdomain-enumerationinformation-gathering+1
1031 year ago
Scanner-and-Patcher preview

Scanner-and-Patcher

GitHubmalwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8
1736 months ago
chomtesh preview

chomtesh

GitHubmr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

osintpenetration-testing-frameworksreconnaissance+7
1345 months ago
skanuvaty preview

skanuvaty

GitHubesc4icescesc/skanuvaty

Dangerously fast DNS/network/port scanner

reconnaissancenetwork-mappingport-scanning+2
9244 years ago
uncover preview

uncover

GitHubprojectdiscovery/uncover

Quickly discover exposed hosts on the internet using multiple search engines.

osintreconnaissancedns-subdomain-enumeration+1
3.0k16 days ago
getsubdomain preview

getsubdomain

GitHubabaykan/getsubdomain

Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl

reconnaissancedns-subdomain-enumerationinformation-gathering+1
84 years ago
BinGoo preview

BinGoo

GitHubhood3drob1n/bingoo

BinGoo! A Linux bash based Bing and Google Dorking Tool

osintreconnaissanceweb-vulnerability-scanners+5
24014 years ago
Searpy preview

Searpy

GitHubj3ers3/searpy

🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找

osintreconnaissancedns-subdomain-enumeration+3
2143 years ago
DomainAlerting preview

DomainAlerting

GitHubpixelbubble/domainalerting

Daily alert when a new domain name is registered and contains your keywords

osintdns-subdomain-enumerationinformation-gathering+1
1192 years ago
attack-surface-framework preview

attack-surface-framework

GitHubvmware-labs/attack-surface-framework

Tool to discover external and internal network attack surface

reconnaissancevulnerability-scannersnetwork-mapping+8
2062 years ago
Dnsrr preview

Dnsrr

GitHuba3h1nt/dnsrr

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

reconnaissancedns-subdomain-enumerationinformation-gathering+1
1224 years ago
puredns preview

puredns

GitHubd3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2.2k5 months ago
Subcert preview

Subcert

GitHuba3h1nt/subcert

Passive subdomain enumeration tool that extracts valid subdomains from certificate transparency logs using Python, ideal for reconnaissance and bug…

osintreconnaissancedns-subdomain-enumeration+2
795 years ago
fav-up preview

fav-up

GitHubpielco11/fav-up

Shodan-powered tool to discover real IP addresses behind Cloudflare by hashing favicon icons using MurmurHash3, enabling origin server identification…

osintreconnaissancenetwork-mapping+2
1.2k1 year ago
evildork preview

evildork

GitHubfricciolosa-red-team/evildork

Automated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…

osintreconnaissancedns-subdomain-enumeration+2
963 years ago
NtHiM preview

NtHiM

GitHubthebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

vulnerability-scannersdns-subdomain-enumerationweb-security+3
3874 years ago
rengine preview

rengine

GitHubyogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

osintreconnaissancevulnerability-scanners+9
8.8k9 months ago
Previous1…9101112Next