Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for collecting and analyzing publicly available information from online sources.

Kitploit recommended

Top tools

10 selected

sherlock

sherlock-project/sherlock

89.1k24 days ago

maigret

soxoj/maigret

36.5k10 days ago

social-analyzer

qeeqbox/social-analyzer

23.7k9 months ago

spiderfoot

smicallef/spiderfoot

20.1k2 years ago

GHunt

mxrch/ghunt

19.3k6 months ago

phoneinfoga

sundowndev/phoneinfoga

17.4k1 month ago

theHarvester

laramies/theharvester

17.0k2h 35m ago

Osintgram

datalux/osintgram

13.9k16h 23m ago

holehe

megadose/holehe

12.0k2 years ago

#10

blackbird

p1ngul1n0/blackbird

7.5k3 days ago

Newest Relevance Most popular Recently updated

1287 results

cve-2016-1764

moloch--/cve-2016-1764

Extraction of iMessage Data via XSS

osintios-securityexploitation+4

5110 years ago

peer-tweet

lmatteis/peer-tweet

Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The_8472 "DHT RSS feeds" http://libtorrent.org/dht_rss.html

osintinformation-gatheringcryptography

86410 years ago

XPL-SEARCH

coderpirata/xpl-search

Search exploits in multiple exploit databases!

osintexploit-frameworksvulnerability-analysis+1

8510 years ago

ACF

cyberhatcoil/acf

Android Connections Forensics

osintnetwork-forensicsmobile-forensics+2

3310 years ago

metagoofil

laramies/metagoofil

Metadata harvester

osintreconnaissanceinformation-gathering+2

1.3k11 years ago

snoopy-ng

sensepost/snoopy-ng

Snoopy v2.0 - modular digital terrestrial tracking framework

osintpacket-sniffing-analysisreconnaissance+9

44311 years ago

webrtc-ips

diafygi/webrtc-ips

Demo: https://diafygi.github.io/webrtc-ips/

osintweb-securityprivacy+1

3.5k11 years ago

spfmap

bishopfox/spfmap

A program to map out SPF and DKIM records for a large number of domains

osintreconnaissanceinformation-gathering+2

4111 years ago

dnsenum

fwaeytens/dnsenum

dnsenum is a perl script that enumerates DNS information

osintreconnaissancedns-subdomain-enumeration+2

69911 years ago

creds.py

danmcinerney/creds.py

Harvest FTP/POP/IMAP/HTTP/IRC creds

osintpacket-sniffing-analysisreconnaissance+3

16811 years ago

Mortimer

nccgroup/mortimer

A collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.

ioc-managementosintnetwork-forensics+3

1212 years ago

Parsero

behindthefirewalls/parsero

Parsero | Robots.txt audit tool

osintreconnaissancevulnerability-analysis+3

17212 years ago

shellshock_crawler

352926/shellshock_crawler

Using google to scan sites for "ShellShock" (CVE-2014-6271)

osintreconnaissancevulnerability-scanners+3

12 years ago

ibrute

hackappcom/ibrute

AppleID bruteforce p0c

osintpassword-attacksexploitation+2

1.3k12 years ago

sploitego

allfro/sploitego

Maltego Penetration Testing Transforms

osintpenetration-testing-frameworksreconnaissance+5

39212 years ago

Archived

tilt

aeondave/tilt

Terminal Ip Lookup Tool

osintreconnaissancenetwork-mapping+4

5612 years ago

MaltegoHeartbleed

disk0nn3ct/maltegoheartbleed

Maltego transform to detect the OpenSSL Heartbleed vulnerability (CVE-2014-0160)