Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
resolvers preview

resolvers

GitHubtrickest/resolvers

Curated, continuously validated list of reliable DNS resolvers for DNS enumeration, reconnaissance, and bug bounty workflows.

curated-resourcesdns-analysisdns-subdomain-enumeration+6
1.0k
5 days ago
getaltname preview

getaltname

GitHubfranccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
3901 month ago
inquisitor preview

inquisitor

GitHubpenafieljlm/inquisitor

Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego

dns-subdomain-enumerationemail-harvestinginformation-gathering+3
1809 years ago
CloudFail preview

CloudFail

GitHubm0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

dns-analysisdns-subdomain-enumerationinformation-gathering+5
2.7k2 years ago
RTA preview

RTA

GitHubflipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
4153 years ago
sublert preview

sublert

GitHubyassineaboukir/sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

dns-subdomain-enumerationinformation-gatheringreconnaissance
1.0k5 years ago
dnsmap preview

dnsmap

GitHubmakefu/dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

dns-subdomain-enumerationinformation-gatheringpenetration-testing+1
1188 years ago
Syborg preview

Syborg

GitHubmilindpurswani/syborg

Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)

dns-analysisdns-subdomain-enumerationinformation-gathering+1
1465 years ago
ditto preview

ditto

GitHubevilsocket/ditto

A tool for IDN homograph attacks and detection.

dns-subdomain-enumerationinformation-gatheringosint+2
7395 years ago
Scanner-and-Patcher preview

Scanner-and-Patcher

GitHubmalwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

dns-subdomain-enumerationeducationexploitation+8
1746 months ago
attack-surface-framework preview

attack-surface-framework

GitHubvmware-labs/attack-surface-framework

Tool to discover external and internal network attack surface

dns-subdomain-enumerationexploitationinformation-gathering+8
2062 years ago
AutoSQLi preview
Archived

AutoSQLi

GitHubclouedoc/autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

dns-subdomain-enumerationosintpenetration-testing+3
2715 years ago
celerystalk preview
Archived

celerystalk

GitHubsethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

crawlerdns-subdomain-enumerationinformation-gathering+8
4005 years ago