#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended
abaykan/getsubdomainGet subdomain list and check whether they are active or not by each response code. Using API by c99.nl
tegal1337/pocketpentesterOffline-first Android offensive security toolkit with 21 modules for recon, port scanning, subdomain enumeration, SQLi/XSS/JWT exploitation, payload…
qyvora/qyvora-anansiTerminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.
sajibuu/burp_collectorA Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.
cyberblackhole/domain-to-webappBash script that enumerates subdomains via Subfinder, resolves IPs, and identifies live web applications hosted on a domain for reconnaissance and…
a3h1nt/sububyModular subdomain enumeration suite with certificate transparency, DNS brute-force, and API-based discovery. Includes post-enumeration modules for…
emrekybs/veiled-eyeOSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.
ankhcorp/nuke.shBash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).
vqkro/higernesa passive OSINT toolkit in python and c++ usernames, emails, domains, ips, phones, hashes. no keys, no logins.
renatus-cartesius/reconswarmExtend your recon with cloud power
1n3/sn1per-mcpMCP server that lets AI assistants drive a self-hosted Sn1per install, running scoped, audited scans and returning findings, ports, subdomains and…
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
dmitryflynn/netlogicNetLogic is an advanced network analysis and cybersecurity toolkit for traffic inspection, packet analysis, and threat detection
yashas-13/pentx-vapt-skillOpen-source AI-powered 5-phase VAPT pentest agent — recon/scan/vuln/exploit/report with PoC
govindpalakkal/evilripIt is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash
shamo0/cve-2021-44228log4shell (CVE-2021-44228) scanning tool
toritoio/torito-r2sTorito React2Shell Scanner & Exploit Tool (CVE-2025-55182 / 66478)
mrharshvardhan/py-log4j-rce-scannerUsing this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.
