#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended
dozermx/argusMulti-phase reconnaissance and attack-surface scanner that maps domains, IPs, ASNs, cloud assets, and CVEs into a knowledge graph with CVSS scoring…
gmh5225/aisa-scannerAISA-Scanner is an AI-powered autonomous vulnerability scanner that maps CVEs to metasploit exploits, MITRE, CEH, and SANS, delivering intelligent,…
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
sec-dan/wp2shell-scannerRead-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)
wattocyber/bug-bounty-libraryCurated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…
sakispat/simple-pentestingAn educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…
r3fr4kt/devvortexHackTheBox Devvortex walkthrough covering subdomain fuzzing, Joomla API enumeration, template-based web shell, bcrypt hash cracking, and Apport-CLI…
wattocyber/vegadnsRust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.
jenderal92/all-reverseip-multithreadingpython 2.7
rotemreiss/robustoRobust Subdomain Takeover Tool
azmisyahrul/prismsecSecure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
rodney-o-c-melby/dns-zone-transfer-testAutomates Domain Name System (DNS) zone transfer testing. Checks for CVE-1999-0532 by automatically finding a given domains nameservers, and tests…
sec-dan/cve-2025-53770-scannerA Python-based reconnaissance scanner for safely identifying potential exposure to SharePoint vulnerability CVE-2025-53770.
security-phoenix-demo/react2shell-scanner-cve-2025-55182React2shell-web-scanner
nocomp/cve-2025-29927-scannerpython script for evaluate if you are vulnerable or not to next.js CVE-2025-29927
jenderal92/reverse_ip_multithreading1Multithreaded reverse IP lookup tool for discovering domains hosted on the same IP address.
foxvr-sudo/bugbounty-arsenal-resourcesChecklists and templates for bug bounty programs. MIT licensed.
