Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Subdomain Enumeration

Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.

Kitploit recommended

Top tools

10 selected
subfinder preview#1

subfinder

GitHubprojectdiscovery/subfinder
14.2k10h 7m ago
amass preview#2

amass

GitHubowasp-amass/amass
15.0k6 months ago
assetfinder preview#3

assetfinder

GitHubtomnomnom/assetfinder
3.7k6 years ago
Findomain preview#4

Findomain

GitHubfindomain/findomain
3.8k1 month ago
dnsx preview#5

dnsx

GitHubprojectdiscovery/dnsx
2.8k7h 1m ago
puredns preview#6

puredns

GitHubd3mondev/puredns
2.2k8 months ago
massdns preview#7

massdns

GitHubblechschmidt/massdns
3.6k3 months ago
shuffledns preview#8

shuffledns

GitHubprojectdiscovery/shuffledns
1.7k9 months ago
Sublist3r preview#9

Sublist3r

GitHubaboul3la/sublist3r
11.0k6 years ago
fierce preview#10

fierce

GitHubmschwager/fierce
1.8k2 years ago
NewestRelevanceMost popularRecently updated
315 results
dnsprobe preview
Archived

dnsprobe

GitHubprojectdiscovery/dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

reconnaissancenetwork-mappinginformation-gathering+3
2855 years ago
bug-bounty-domains preview
Archived

bug-bounty-domains

GitHubarpsyndicate/bug-bounty-domains

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

osintreconnaissanceinformation-gathering+2
2272 years ago
nodesub preview
Archived

nodesub

GitHubpikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

reconnaissancedns-subdomain-enumerationinformation-gathering+3
1492 years ago
cloud-buster preview
Archived

cloud-buster

GitHubsagehack/cloud-buster

A Cloudflare resolver that works

reconnaissancevulnerability-analysisinformation-gathering+5
1467 years ago
dr_robot preview
Archived

dr_robot

GitHubsandialabs/dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

osintreconnaissancecontainer-security+5
1433 years ago
tilt preview
Archived

tilt

GitHubaeondave/tilt

Terminal Ip Lookup Tool

osintreconnaissancenetwork-mapping+4
5612 years ago
Dumb preview
Archived

Dumb

GitHubgiovanifss/dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

reconnaissancenetwork-mappingdns-subdomain-enumeration+5
518 years ago
columbus-server preview
Archived

columbus-server

GitHubelmasy-com/columbus-server

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

osintreconnaissancedns-subdomain-enumeration+3
283 years ago
DomainDouche preview
Archived

DomainDouche

GitHubn0kovo/domaindouche

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

osintreconnaissancedns-subdomain-enumeration+2
263 years ago
Previous1…1718Next
Subdomain Enumeration — Page 18 | Kitploit