Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
30 results
rapiddns preview

rapiddns

GitHubnullt3r/rapiddns

Rapidly enumerate subdomains and domains using rapiddns.io.

dns-analysisdns-subdomain-enumerationinformation-gathering+3
86
4 years ago
OSINT-Framework preview

OSINT-Framework

GitHublockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

curated-resourcesdns-subdomain-enumerationeducation+7
12.0k4 months ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

crawlerdns-subdomain-enumerationemail-harvesting+7
36.9k10h 3m ago
rapiddns-cli preview

rapiddns-cli

GitHubrapiddns/rapiddns-cli

A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform DNS…

dns-analysisdns-subdomain-enumerationinformation-gathering+3
396 months ago
CloudFlair preview

CloudFlair

GitHubchristophetd/cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

dns-subdomain-enumerationinformation-gatheringmisconfiguration+3
3.0k1 year ago
GeoSentinel preview

GeoSentinel

GitHubh9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

crawlerdata-exfiltrationdns-subdomain-enumeration+7
1.1k2 months ago
getaltname preview

getaltname

GitHubfranccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
3901 month ago
iptodomain preview

iptodomain

GitHubhackplayers/iptodomain

This tool extract domains from IP address based in the information saved in virustotal.

dns-subdomain-enumerationinformation-gatheringosint+1
239 years ago
inquisitor preview

inquisitor

GitHubpenafieljlm/inquisitor

Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego

dns-subdomain-enumerationemail-harvestinginformation-gathering+3
1809 years ago
datasploit preview

datasploit

GitHubdatasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

dns-subdomain-enumerationemail-harvestinginformation-gathering+6
3.3k9 months ago
ctfr preview

ctfr

GitHubunapibageek/ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

dns-subdomain-enumerationinformation-gatheringosint+1
2.1k6 years ago
CertCrunchy preview

CertCrunchy

GitHubjoda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

dns-subdomain-enumerationinformation-gatheringosint+1
293 months ago
censys-subdomain-finder preview

censys-subdomain-finder

GitHubchristophetd/censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

dns-subdomain-enumerationinformation-gatheringosint+2
8431 year ago
subgen preview

subgen

GitHubpry0cc/subgen

A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!

dns-subdomain-enumerationinformation-gatheringreconnaissance+1
856 years ago
Findomain preview

Findomain

GitHubfindomain/findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain…

dns-subdomain-enumerationinformation-gatheringosint+2
3.8k28 days ago
AnalyticsRelationships preview

AnalyticsRelationships

GitHubjosue87/analyticsrelationships

Get related domains / subdomains by looking at Google Analytics IDs

dns-subdomain-enumerationinformation-gatheringosint+1
2544 years ago
gau preview

gau

GitHublc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

dns-subdomain-enumerationinformation-gatheringosint+2
5.1k5 months ago
Watcher preview

Watcher

GitHubthalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

ai-securitydata-exfiltrationdns-subdomain-enumeration+7
1.4k29 days ago
Previous12Next