Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Information Gathering

General purpose tools for collecting various types of information about targets.

Kitploit recommended

Top tools

10 selected
nmap preview#1

nmap

GitHubnmap/nmap
13.3k7h 27m ago
amass preview#2

amass

GitHubowasp-amass/amass
15.0k5 months ago
spiderfoot preview#3

spiderfoot

GitHubsmicallef/spiderfoot
20.1k2 years ago
subfinder preview#4

subfinder

GitHubprojectdiscovery/subfinder
14.2k19h 16m ago
theHarvester preview#5

theHarvester

GitHublaramies/theharvester
17.0k6 days ago
reconftw preview#6

reconftw

GitHubsix2dez/reconftw
8.0k3 days ago
httpx preview#7

httpx

GitHubprojectdiscovery/httpx
10.3k14 days ago
WhatWeb preview#8

WhatWeb

GitHuburbanadventurer/whatweb
6.8k5 months ago
naabu preview#9

naabu

GitHubprojectdiscovery/naabu
6.2k4 days ago
FinalRecon preview#10

FinalRecon

GitHubthewhiteh4t/finalrecon
2.9k3 months ago
NewestRelevanceMost popularRecently updated
6174 results
WhoCord preview

WhoCord

GitHubsiv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

osintphishing-toolsreconnaissance+8
8310 days ago
sharingan preview

sharingan

GitHubleobeosab/sharingan

Offensive Security recon tool

reconnaissanceport-scanningdns-subdomain-enumeration+2
915 years ago
gitcolombo preview

gitcolombo

GitHubsoxoj/gitcolombo

🧬 Extract and analyze contributors info from git repos

osintcode-analysisinformation-gathering
9326 days ago
Concierge preview

Concierge

GitHublixmk/concierge

Concierge Toolkit: Physical Access Control Identification and Exploitation

embedded-systems-securityvulnerability-analysisexploitation+5
1198 years ago
netscout preview

netscout

GitHubcaio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

osintreconnaissancedns-subdomain-enumeration+3
1822 years ago
on-the-fly preview

on-the-fly

GitHubtelefonica/on-the-fly

on-the-fly

iot-securityexploitationscada-ics-security+4
862 years ago
Inspector preview

Inspector

GitHubgraniet/inspector

The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel…

privilege-escalationvulnerability-analysisinformation-gathering+1
1207 years ago
CVEs preview

CVEs

GitHubbi7s/cves

Repository containing data and tools related to Common Vulnerabilities and Exposures (CVEs) for vulnerability analysis and threat intelligence.

vulnerability-analysisinformation-gatheringthreat-intelligence+1
362 months ago
neet preview

neet

GitHubjonnyhightower/neet

Neet - Network Enumeration and Exploitation Tool

reconnaissancevulnerability-scannersnetwork-mapping+5
1699 years ago
smod preview

smod

GitHub0x0mar/smod

MODBUS Penetration Testing Framework

penetration-testing-frameworksvulnerability-analysisscada-ics-security+3
9410 years ago
Teamsniper preview

Teamsniper

GitHubxret2pwn/teamsniper

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).

reconnaissancedata-exfiltrationinformation-gathering+2
1984 years ago
x18-leak preview

x18-leak

GitHubbazad/x18-leak

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

ios-securityvulnerability-analysisexploitation+2
878 years ago
Apkx-Hunter preview

Apkx-Hunter

GitHubsyscallx-18113/apkx-hunter

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

android-securitystatic-analysisvulnerability-analysis+7
8310 days ago
maldrolyzer preview

maldrolyzer

GitHubmaldroid/maldrolyzer

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

android-securitystatic-analysisinformation-gathering+3
11211 years ago
log4jcheck preview

log4jcheck

GitHubnorthwavesecurity/log4jcheck

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3
1264 years ago
certstreamcatcher preview

certstreamcatcher

GitHubjimywork/certstreamcatcher

This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…

osintphishing-toolsinformation-gathering+2
817 years ago
ActiveDirectoryEnumeration preview

ActiveDirectoryEnumeration

GitHubcaspergn/activedirectoryenumeration

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

reconnaissancevulnerability-analysisexploitation+2
1478 months ago
proxyshell preview

proxyshell

GitHubhorizon3ai/proxyshell

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

reconnaissancevulnerability-analysisexploitation+3
1215 years ago
Previous1…959697…100Next