Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for gathering information about targets and identifying attack surfaces.

Kitploit recommended

Top tools

10 selected

amass

owasp-amass/amass

15.0k6 months ago

subfinder

projectdiscovery/subfinder

14.2k16h 18m ago

reconftw

six2dez/reconftw

8.0k1 month ago

spiderfoot

smicallef/spiderfoot

20.1k2 years ago

recon-ng

lanmaster53/recon-ng

5.8k18 days ago

httpx

projectdiscovery/httpx

10.3k16h 17m ago

naabu

projectdiscovery/naabu

6.2k15h 15m ago

nmap

nmap/nmap

13.3k1 day ago

theHarvester

laramies/theharvester

17.0k3 days ago

#10

FinalRecon

thewhiteh4t/finalrecon

2.9k4 months ago

Newest Relevance Most popular Recently updated

7625 results

CloudFlair

christophetd/cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

reconnaissancedns-subdomain-enumerationinformation-gathering+3

3.0k1 year ago

SocialBox

cyb0r9/socialbox

Brute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…

password-attacksinformation-gatheringsocial-engineering

2.0k7 years ago

HTTPLeaks

cure53/httpleaks

Enumerates all HTML elements and attributes that can leak HTTP requests, enabling testing of browsers, web proxies, and email clients for unintended…

information-gatheringweb-securityprivacy+1

2.1k1 month ago

WEF

d3ext/wef

Wi-Fi Exploitation Framework

wi-fi-auditingvulnerability-analysisexploitation+4

3.2k1 year ago

spider

spider-rs/spider

Get web data for AI agents and LLMs

information-gatheringweb-securitycrawler+2

2.6k7h 49m ago

Active-Directory-Exploitation-Cheat-Sheet

integration-it/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

privilege-escalationreconnaissancepersistence-mechanisms+6

2.8k5 years ago

GitDorker

obheda12/gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

osintreconnaissanceinformation-gathering+2

2.6k5 years ago

cve-search

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

ioc-managementvulnerability-scannersthreat-feeds-aggregators+4

2.6k1 month ago

Mind-Maps

imran-parray/mind-maps

Mind-Maps of Several Things

privilege-escalationreconnaissancevulnerability-analysis+9

2.7k3 years ago

axiom

pry0cc/axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf,…

cloud-infrastructure-securityreconnaissancevulnerability-scanners+4

4.4k2 years ago

SecretFinder

m4ll0k/secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

osintinformation-gatheringweb-security+1

2.5k2 years ago

EasY_HaCk

sabri-zaki/easy_hack

Hack the World using Termux

password-crackingpenetration-testing-frameworksweb-vulnerability-scanners+4

2.5k1 year ago

pwnedOrNot

thewhiteh4t/pwnedornot

OSINT Tool for Finding Passwords of Compromised Email Addresses

osintpassword-crackingvulnerability-analysis+1

2.6k6 months ago

msticpy

microsoft/msticpy

Microsoft Threat Intelligence Security Tools

ioc-managementosintinformation-gathering+6

2.0k8 days ago

PentestingEverything

m14r41/pentestingeverything

osintweb-securitynetwork-security+9

2.0k18 days ago

pentest-copilot

bugbasesecurity/pentest-copilot

AI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…

penetration-testing-frameworksreconnaissanceweb-proxies-interception+8

1.5k2 months ago

libc-database

niklasb/libc-database

Build a database of libc offsets to simplify exploitation

vulnerability-analysisexploitationinformation-gathering+2

1.9k2 months ago

altdns

infosec-au/altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

osintreconnaissancedns-subdomain-enumeration+4