Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
36 results
subfinder preview

subfinder

GitHubprojectdiscovery/subfinder

Fast passive subdomain enumeration tool.

dns-subdomain-enumerationinformation-gatheringosint+4
14.2k
10 days ago
subbrute preview

subbrute

GitHubtherook/subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

dns-analysisdns-subdomain-enumerationinformation-gathering+2
3.5k9 years ago
dnsrecon preview

dnsrecon

GitHubdarkoperator/dnsrecon

DNS Enumeration Script

dns-analysisdns-subdomain-enumerationinformation-gathering+3
3.1k4 days ago
altdns preview

altdns

GitHubinfosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

dns-subdomain-enumerationinformation-gatheringosint+1
2.5k1 year ago
puredns preview

puredns

GitHubd3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

dns-analysisdns-subdomain-enumerationinformation-gathering+2
2.2k5 months ago
WireTapper preview

WireTapper

GitHubh9zdev/wiretapper

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

bluetooth-securitydns-subdomain-enumerationembedded-systems-security+9
2.2k3 months ago
GooFuzz preview

GooFuzz

GitHubm3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

dns-subdomain-enumerationfuzzinginformation-gathering+3
1.6k8 months ago
VHostScan preview

VHostScan

GitHubcodingo/vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…

dns-subdomain-enumerationinformation-gatheringpenetration-testing+3
1.3k1 year ago
sublert preview

sublert

GitHubyassineaboukir/sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

dns-subdomain-enumerationinformation-gatheringreconnaissance
1.0k5 years ago
ditto preview

ditto

GitHubevilsocket/ditto

A tool for IDN homograph attacks and detection.

dns-subdomain-enumerationinformation-gatheringosint+2
7395 years ago
dnsenum preview

dnsenum

GitHubfwaeytens/dnsenum

dnsenum is a perl script that enumerates DNS information

dns-analysisdns-subdomain-enumerationinformation-gathering+2
70211 years ago
GPT_Vuln-analyzer preview

GPT_Vuln-analyzer

GitHubmorpheuslord/gpt_vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports…

ai-securitydns-analysisdns-subdomain-enumeration+7
5961 year ago
getaltname preview

getaltname

GitHubfranccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
3901 month ago
dump preview

dump

GitHubs0md3v/dump

Stuff that doesn't deserves its own repository.

dns-subdomain-enumerationinformation-gatheringosint+6
3591 year ago
kanha preview

kanha

GitHubpwnwriter/kanha

🦚 A web-app pentesting suite written in rust .

dns-subdomain-enumerationfuzzinginformation-gathering+5
3241 year ago
OSweep preview

OSweep

GitHubecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

dns-subdomain-enumerationinformation-gatheringmalware-analysis+4
3187 years ago
fierce-domain-scanner preview

fierce-domain-scanner

GitHubdavidpepper/fierce-domain-scanner

Fierce.pl Domain Scanner

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+1
3049 years ago
Bountystrike-sh preview

Bountystrike-sh

GitHubbountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2913 years ago
Previous12Next