Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Crawler

Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.

NewestRelevanceMost popularRecently updated
286 results
burp-dom-scanner preview

burp-dom-scanner

GitHubfcavallarin/burp-dom-scanner

Burp Suite's extension to scan and crawl Single Page Applications

web-vulnerability-scannersdynamic-analysis-sandboxingweb-security+1
106
3 years ago
endext preview

endext

GitHubsirbugs/endext

Extracts all possible endpoints, URLs, and paths from JavaScript files using customizable regex patterns for web application reconnaissance and API…

reconnaissanceinformation-gatheringweb-security+1
2192 years ago
xcrawl3r preview

xcrawl3r

GitHubhueristiq/xcrawl3r

Recursively spider webpages to discover all URLs by following links, parsing sitemaps, and robots.txt files. Ideal for security reconnaissance and…

reconnaissanceinformation-gatheringweb-security+2
1119 months ago
mapsdumper preview

mapsdumper

GitHubtegal1337/mapsdumper

Dump place details from Google Maps like phone,email,website,and reviews

osintinformation-gatheringemail-harvesting+1
731 year ago
tiktok-scraper preview

tiktok-scraper

GitHubsoxoj/tiktok-scraper

Scrape and download TikTok video posts, user profiles, hashtag trends, and music feed metadata via CLI or Node.js module. Supports batch downloads,…

osintdata-exfiltrationinformation-gathering+1
484 years ago
LinkedInDumper preview

LinkedInDumper

GitHubl4rm4nd/linkedindumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

osintreconnaissanceinformation-gathering+2
60611h 7m ago
Jbin-website-secret-scraper preview

Jbin-website-secret-scraper

GitHubh33tlit/jbin-website-secret-scraper

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and…

information-gatheringweb-securitysecret-detection+1
1784 years ago
URS preview

URS

GitHubjosephlai241/urs

Universal Reddit Scraper - A comprehensive Reddit scraping/archival command-line tool.

osintscripting-automationinformation-gathering+1
1.0k1 month ago
second-order preview

second-order

GitHubmhmdiaa/second-order

Crawls web applications to detect second-order subdomain takeover vulnerabilities by collecting URLs and matching configurable rules for non-200…

reconnaissancevulnerability-scannersweb-security+2
4071 year ago
vimana-framework preview

vimana-framework

GitHubs4dhulabs/vimana-framework

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+9
6624 days ago
crawpy preview

crawpy

GitHubmorph3/crawpy

Asynchronous HTTP content discovery tool with auto-calibration, recursive scanning, and report generation for enumerating hidden web directories and…

reconnaissancevulnerability-analysisinformation-gathering+2
1181 year ago
wsvuls preview

wsvuls

GitHubanouarbensaad/wsvuls

CLI website vulnerability scanner that detects outdated server software, insecure HTTP headers, and extracts Cloudflare IP/port data with performance…

vulnerability-scannersinformation-gatheringweb-security+1
574 years ago
socid-extractor preview

socid-extractor

GitHubsoxoj/socid-extractor

⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites

osintreconnaissanceinformation-gathering+2
1.1k3 days ago
Web-Cache-Vulnerability-Scanner preview

Web-Cache-Vulnerability-Scanner

GitHubhackmanit/web-cache-vulnerability-scanner

Go-based CLI scanner for web cache poisoning and deception. Supports 10 poisoning techniques, multiple deception methods, built-in crawler, JSON…

vulnerability-scannersweb-vulnerability-scannersweb-security+2
1.2k7 months ago
dorkscout preview

dorkscout

GitHubr4ygm/dorkscout

Automated Google dork scanner that fetches exploit-db dork lists and scans targets or the entire internet for vulnerable applications, secret files,…

osintvulnerability-analysisinformation-gathering+2
2445 years ago
subcrawl preview

subcrawl

GitHubhpthreatresearch/subcrawl

Modular framework for discovering and analyzing open directories on the web. Crawls URLs, extracts content, applies YARA/ClamAV scanning, and outputs…

osintvulnerability-analysisinformation-gathering+3
1502 years ago
AllHackingTools preview

AllHackingTools

GitHubmishakorzik/allhackingtools

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

penetration-testing-frameworksphishing-toolspassword-attacks+8
6.0k9 months ago
rengine preview

rengine

GitHubyogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

osintreconnaissancevulnerability-scanners+9
8.8k9 months ago
Previous1…13141516Next