Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Subdomain Enumeration

Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.

Kitploit recommended

Top tools

10 selected
subfinder preview#1

subfinder

GitHubprojectdiscovery/subfinder
14.2k1 day ago
amass preview#2

amass

GitHubowasp-amass/amass
15.0k5 months ago
assetfinder preview#3

assetfinder

GitHubtomnomnom/assetfinder
3.7k6 years ago
Findomain preview#4

Findomain

GitHubfindomain/findomain
3.8k4 days ago
dnsx preview#5

dnsx

GitHubprojectdiscovery/dnsx
2.8k3 days ago
puredns preview#6

puredns

GitHubd3mondev/puredns
2.2k6 months ago
massdns preview#7

massdns

GitHubblechschmidt/massdns
3.6k4 months ago
shuffledns preview#8

shuffledns

GitHubprojectdiscovery/shuffledns
1.7k7 months ago
Sublist3r preview#9

Sublist3r

GitHubaboul3la/sublist3r
11.0k6 years ago
fierce preview#10

fierce

GitHubmschwager/fierce
1.8k2 years ago
NewestRelevanceMost popularRecently updated
302 results
Subcert preview

Subcert

GitHuba3h1nt/subcert

Passive subdomain enumeration tool that extracts valid subdomains from certificate transparency logs using Python, ideal for reconnaissance and bug…

osintreconnaissancedns-subdomain-enumeration+2
795 years ago
Belati preview
Archived

Belati

GitHubaancw/belati

The Traditional Swiss Army Knife for OSINT

osintreconnaissanceinformation-gathering+5
5645 years ago
Spartan preview

Spartan

GitHubmad-robot/spartan

Automated reconnaissance framework integrating subdomain enumeration, live host probing, port scanning, CMS detection, and directory brute-forcing…

reconnaissanceport-scanninginformation-gathering+3
1935 years ago
gasmask preview

gasmask

GitHubtwelvesec/gasmask

Information gathering tool - OSINT

osintreconnaissancevulnerability-analysis+4
1.5k5 years ago
HOCig1_2 preview

HOCig1_2

GitHubhackersonlineclub/hocig1_2

HOCig- Automatic HOC Information Gathering Tool V 1.2

osintreconnaissanceport-scanning+5
115 years ago
PentestBro preview

PentestBro

GitHubmarius-rothenbuecher/pentestbro

Windows-based reconnaissance tool combining subdomain enumeration, port scanning, banner grabbing, whois lookups, and web path enumeration for…

reconnaissanceport-scanninginformation-gathering+3
605 years ago
domained preview
Archived

domained

GitHubtypeerror/domained

Multi Tool Subdomain Enumeration

osintreconnaissancedns-subdomain-enumeration+5
7235 years ago
celerystalk preview
Archived

celerystalk

GitHubsethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

reconnaissancevulnerability-scannersnetwork-mapping+8
4005 years ago
TIDoS-Framework preview

TIDoS-Framework

GitHub0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

osintreconnaissancevulnerability-scanners+7
1.9k5 years ago
crtsh preview

crtsh

GitHubknqyf263/crtsh

API client for crt.sh

osintreconnaissancesubdomain-enumeration
415 years ago
Eagle preview

Eagle

GitHubbitthebyte/eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

vulnerability-scannersexploitationweb-application-exploitation+4
1285 years ago
BigBountyRecon preview

BigBountyRecon

GitHubviralmaniar/bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…

osintreconnaissancevulnerability-analysis+6
1.6k5 years ago
tko-subs preview

tko-subs

GitHubanshumanbh/tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

vulnerability-analysispenetration-testingcloud-security+2
7765 years ago
dnsprobe preview
Archived

dnsprobe

GitHubprojectdiscovery/dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

reconnaissancenetwork-mappinginformation-gathering+3
2855 years ago
rsdl preview

rsdl

GitHubtismayil/rsdl

Subdomain Scan With Ping Method.

reconnaissancedns-subdomain-enumerationinformation-gathering+1
465 years ago
ReconNote preview

ReconNote

GitHub0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

reconnaissancevulnerability-scannersinformation-gathering+3
4115 years ago
CVE-2020-13942-POC- preview

CVE-2020-13942-POC-

GitHubshifa123/cve-2020-13942-poc-

CVE-2020-13942 POC + Automation Script

reconnaissancevulnerability-analysisexploitation+2
95 years ago
PCWT preview

PCWT

GitHubascr0b/pcwt

Web-based project management interface for penetration testing and bug bounty workflows, automating port scanning with Nmap/Masscan and subdomain…

penetration-testing-frameworksreconnaissancevulnerability-scanners+5
465 years ago
Previous1…131415…17Next