Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for collecting and analyzing publicly available information from online sources.

Kitploit recommended

Top tools

10 selected

theHarvester

laramies/theharvester

17.0k14h 33m ago

maigret

soxoj/maigret

36.5k16h 15m ago

hexstrike-ai

0x4m4/hexstrike-ai

10.9k17 days ago

opencti

opencti-platform/opencti

9.8k13h 57m ago

tpotce

telekom-security/tpotce

9.4k16 days ago

CyberStrikeAI

ed1s0nz/cyberstrikeai

5.7k2 days ago

claude-bug-bounty

shuvonsec/claude-bug-bounty

4.2k11 days ago

#10

malwoverview

alexandreborges/malwoverview

4.1k13 days ago

#11

Awesome-Hacking

hack-with-github/awesome-hacking

118.0k26 days ago

#12

pentestagent

gh05tcrew/pentestagent

2.9k17 days ago

Newest Relevance Most popular Recently updated

1218 results

uncover

projectdiscovery/uncover

Quickly discover exposed hosts on the internet using multiple search engines.

osintreconnaissancedns-subdomain-enumeration+1

3.0k16 days ago

gau

lc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

osintreconnaissancedns-subdomain-enumeration+2

5.1k5 months ago

pyWhat

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

osintreconnaissancevulnerability-analysis+7

7.3k3 years ago

mosint

alpkeskin/mosint

An automated e-mail OSINT tool

osintreconnaissancedata-exfiltration+2

6.0k2 years ago

redamon

samugit83/redamon

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…

osintpenetration-testing-frameworksprivilege-escalation+8

2.3k1 day ago

gitGraber

hisxo/gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…

osintvulnerability-analysisinformation-gathering+1

2.3k4 months ago

ST3GG

elder-plinius/st3gg

All-in-one steganography suite

osintencryption-decryption-toolsdata-exfiltration+8

1.7k2 months ago

yeti

yeti-platform/yeti

Your Everyday Threat Intelligence

ioc-managementosintthreat-feeds-aggregators+8

2.0k1 day ago

androrat

designativedave/androrat

Remote Administration Tool for Android devices

android-securityosintpayload-generation+9

1.6k3 years ago

h8mail

khast3x/h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

osintpassword-crackingreconnaissance+3

5.2k4 years ago

knockpy

guelfoweb/knockpy

Knock Subdomain Scan

osintreconnaissanceinformation-gathering+3

4.2k6 months ago

GitDorker

obheda12/gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

osintreconnaissanceinformation-gathering+2

2.6k5 years ago

SecretFinder

m4ll0k/secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

osintinformation-gatheringweb-security+1

2.5k2 years ago

google-dorks

proviesec/google-dorks

Curated Google Dork search patterns for web security and bug bounty reconnaissance, covering exposed files, admin panels, CMS instances, logs, and…

osintreconnaissancevulnerability-analysis+5

1.3k26 days ago

altdns

infosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

osintreconnaissancedns-subdomain-enumeration+1

2.5k1 year ago

device-activity-tracker

gommzystudio/device-activity-tracker

A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…