#1Tools for discovering open ports, services, and potential entry points on network devices.
Kitploit recommended


Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.

Attack Surface Discovery tool built on a microservice approach, utilizing multi-threading for fast, internet-scale asset indexing

A Ruby interface to nmap, the exploration tool and security / port scanner. Allows automating nmap and parsing nmap XML files.

Single-packet UDP scanner in Go for fast discovery of 45+ services across networks, supporting custom probes, CIDR scanning, and JSONL output.

Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Divide full port scan results and use it for targeted Nmap runs

Automated reconnaissance framework integrating subdomain enumeration, live host probing, port scanning, CMS detection, and directory brute-forcing…

A modular recon tool for pentesting

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which…

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

Modular information gathering framework for penetration testers, featuring website analysis, email/phone lookup, credit card BIN checking, IP…

C# console application for post-exploitation and red team operations, integrating SharpSploit to execute Mimikatz commands, perform Kerberoasting,…

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

Go tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…

Pentesting suite for Maltego based on data in a Metasploit database

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix…

Fast browser-based network discovery module