Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
126 results
tilt preview
Archived

tilt

GitHubaeondave/tilt

Terminal Ip Lookup Tool

dns-analysisdns-subdomain-enumerationinformation-gathering+4
55
12 years ago
MetaFinder preview
Archived

MetaFinder

GitHubjosue87/metafinder

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

crawlerdns-subdomain-enumerationinformation-gathering+2
2222 years ago
firebase preview
Archived

firebase

GitHubfrancesc-h/firebase

Exploiting misconfigured firebase databases

crawlerdata-exfiltrationdns-subdomain-enumeration+5
1247 years ago
nodesub preview
Archived

nodesub

GitHubpikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

dns-analysisdns-subdomain-enumerationinformation-gathering+3
1442 years ago
columbus-server preview
Archived

columbus-server

GitHubelmasy-com/columbus-server

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

api-security-testingdns-subdomain-enumerationinformation-gathering+3
273 years ago
Dumb preview
Archived

Dumb

GitHubgiovanifss/dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

dns-analysisdns-subdomain-enumerationinformation-gathering+5
518 years ago
dr_robot preview
Archived

dr_robot

GitHubsandialabs/dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

container-securitydns-analysisdns-subdomain-enumeration+5
1433 years ago
probable_subdomains preview
Archived

probable_subdomains

GitHubzzzteph/probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!

curated-resourcesdns-subdomain-enumerationinformation-gathering+4
2431 year ago
Reconnoitre preview

Reconnoitre

GitHubcodingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+4
2.2k6 years ago
VHostScan preview

VHostScan

GitHubcodingo/vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and…

dns-subdomain-enumerationinformation-gatheringpenetration-testing+3
1.3k1 year ago
skanuvaty preview

skanuvaty

GitHubesc4icescesc/skanuvaty

Dangerously fast DNS/network/port scanner

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+2
9304 years ago
pentest-tools preview

pentest-tools

GitHubgwen001/pentest-tools

A collection of custom security tools for quick needs.

dns-subdomain-enumerationfuzzinginformation-gathering+7
3.3k16 days ago
sublert preview

sublert

GitHubyassineaboukir/sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific…

dns-subdomain-enumerationinformation-gatheringreconnaissance
1.0k5 years ago
OSweep preview

OSweep

GitHubecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

dns-subdomain-enumerationinformation-gatheringmalware-analysis+4
3207 years ago
metabigor preview

metabigor

GitHubj3ssie/metabigor

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
1.8k1 month ago
aiodnsbrute preview

aiodnsbrute

GitHubblark/aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

dns-subdomain-enumerationinformation-gatheringosint+3
6767 years ago
prismsec preview

prismsec

GitHubazmisyahrul/prismsec

Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting

dns-subdomain-enumerationpenetration-testingpenetration-testing-frameworks+7
1 month ago
WordList preview

WordList

GitHubrix4uni/wordlist

Curated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…

dns-subdomain-enumerationfuzzinginformation-gathering+6
1533 months ago
Previous1234567Next