Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for discovering subdomains and DNS records associated with target domains.

Kitploit recommended

Top tools

10 selected

subfinder

projectdiscovery/subfinder

14.2k3 days ago

amass

owasp-amass/amass

15.0k6 months ago

assetfinder

tomnomnom/assetfinder

3.7k6 years ago

Findomain

findomain/findomain

3.8k1 month ago

dnsx

projectdiscovery/dnsx

2.8k3 days ago

puredns

d3mondev/puredns

2.2k8 months ago

massdns

blechschmidt/massdns

3.6k3 months ago

shuffledns

projectdiscovery/shuffledns

1.7k9 months ago

Sublist3r

aboul3la/sublist3r

11.0k6 years ago

#10

fierce

mschwager/fierce

1.8k2 years ago

Newest Relevance Most popular Recently updated

230 results

APIHarvester

piratesshield/apiharvester

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

reconnaissancevulnerability-scannersweb-vulnerability-scanners+9

353 months ago

DNSrecon-gui

micro-joan/dnsrecon-gui

Graphical DNS enumeration tool for Kali Linux that scans standard records (A, NS, SOA, MX) and visualizes results in mind maps for reconnaissance and…

reconnaissancedns-subdomain-enumerationinformation-gathering+2

613 years ago

fernmelder

stealth/fernmelder

async mass DNS resolver

reconnaissancenetwork-mappingdns-subdomain-enumeration+3

872 years ago

CertCrunchy

joda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

osintreconnaissancedns-subdomain-enumeration+1

295 months ago

XCTR-Hacking-Tools

capture0x/xctr-hacking-tools

XCTR Hacking Tools

osintreconnaissancedns-subdomain-enumeration+2

395 years ago

urlbrute

reddyyz/urlbrute

Directory/Subdomain scanner developed in GoLang.

vulnerability-scannersdns-subdomain-enumerationinformation-gathering+1

485 years ago

rsdl

tismayil/rsdl

Subdomain Scan With Ping Method.

reconnaissancedns-subdomain-enumerationinformation-gathering+1

465 years ago

hermes-osint

expert21/hermes-osint

Hermes — an ephemeral, Docker-powered OSINT framework for testing, tinkering, and secure investigative automation.

osintpassword-crackingreconnaissance+6

429 months ago

vhostawesome

xssdoctor/vhostawesome

Concurrent virtual host scanner that brute-forces subdomains across multiple IPs on common web ports, filtering results by status codes and content…

reconnaissancedns-subdomain-enumerationinformation-gathering+1

372 years ago

saas_enum

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

osintreconnaissancedns-subdomain-enumeration+3

401 year ago

rapiddns-cli

rapiddns/rapiddns-cli

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

osintreconnaissancenetwork-mapping+3

358 months ago

insightsnexus

cyberintel-labs/insightsnexus

OSINT Graph Investigation Application

osintreconnaissancenetwork-mapping+7

3410 months ago

bug-bounty-tools

rxerium/bug-bounty-tools

A BASH Script to automate the installation of the most popular bug bounty tools

osintreconnaissancevulnerability-scanners+7

2610 months ago

subfinder-action

projectdiscovery/subfinder-action

Fast and passive subdomain enumeration.

osintreconnaissancedns-subdomain-enumeration+3

214 years ago

ONUS

maverickaayush/onus

Locally-hosted, air-gapped VAPT platform that runs 8 parallel scanning modules, deterministically scores findings with CVSS v3.1, and generates PDF…

reconnaissancevulnerability-scannersnetwork-mapping+6

101 month ago

CloudPulse

yousseflahouifi/cloudpulse

SSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…

osintreconnaissancevulnerability-scanners+3

202 years ago

iptodomain

hackplayers/iptodomain

This tool extract domains from IP address based in the information saved in virustotal.