Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.

Newest Relevance Most popular Recently updated

286 results

webanalyze

rverton/webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

osintreconnaissanceinformation-gathering+3

1.2k4 months ago

SeekYou

teycir/seekyou

OSINT intelligence on any IP, domain, or ASN

osintreconnaissancenetwork-mapping+9

192 months ago

phantomstars

tg12/phantomstars

Automated detection and tracking of fake engagement on GitHub — daily CI, zero infrastructure

osintreconnaissancescripting-automation+6

742 months ago

Bug-Bounty-Arsenal-v.3

foxvr-sudo/bug-bounty-arsenal-v.3

50+ detectors across 10 categories, with continuous monitoring built in: schedule recurring scans, get alerted only on new findings, track your…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8

121 month ago

voidaccess

katrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

osintreconnaissanceencryption-decryption-tools+8

59016 days ago

vigolium

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

vulnerability-scannersweb-vulnerability-scannersdynamic-analysis-sandboxing+9

9711 day ago

CVE-2023-2982-POC

h4k6/cve-2023-2982-poc

WordPress社交登录和注册（Discord，Google，Twitter，LinkedIn）<=7.6.4-绕过身份验证

vulnerability-analysisexploitationweb-application-exploitation+3

93 years ago

Onionscan

n3ph0s/onionscan

osintreconnaissancenetwork-mapping+4

4 years ago

web

osintbuddy/web

Entity graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights 🌐 (Web version)

osintreconnaissancedata-exfiltration+4

88 months ago

directus-security

perufitlife/directus-security

Keyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…

reconnaissancevulnerability-scannersapi-security-testing+6

2 months ago

sigint

iitoneloc/sigint

Real-time OSINT intelligence dashboard: 7 live data sources (aircraft, AIS vessels, seismic, fires, weather, GDELT events, news) on an interactive…

osintreconnaissancedata-exfiltration+4

3 months ago

social-analyzer

qeeqbox/social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

osintreconnaissanceosint-social-engineering+6

23.7k7 months ago

XSStrike

s0md3v/xsstrike

Most advanced XSS scanner.

web-vulnerability-scannerspayload-generationvulnerability-analysis+6

15.1k1 year ago

WhatWeb

urbanadventurer/whatweb

Next generation web scanner

osintreconnaissancevulnerability-scanners+6

6.8k4 months ago

Photon

s0md3v/photon

Incredibly fast crawler designed for OSINT.

osintreconnaissancedns-subdomain-enumeration+3

13.1k13 days ago

FinalRecon

thewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

osintreconnaissanceport-scanning+7

2.9k2 months ago

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

osintreconnaissancenetwork-mapping+7

80.6k10h 57m ago

maigret

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

osintreconnaissanceosint-social-engineering+7

36.5k12h 36m ago

Previous 1…345…16 Next