Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for gathering information about targets and identifying attack surfaces.

Kitploit recommended

Top tools

10 selected

amass

owasp-amass/amass

15.0k9 days ago

subfinder

projectdiscovery/subfinder

14.2k1 day ago

reconftw

six2dez/reconftw

8.0k5 days ago

spiderfoot

smicallef/spiderfoot

20.1k2 years ago

recon-ng

lanmaster53/recon-ng

5.8k29 days ago

httpx

projectdiscovery/httpx

10.3k1 day ago

naabu

projectdiscovery/naabu

6.2k1 day ago

nmap

nmap/nmap

13.3k1 day ago

theHarvester

laramies/theharvester

17.0k14 days ago

#10

FinalRecon

thewhiteh4t/finalrecon

2.9k3 days ago

Newest Relevance Most popular Recently updated

7707 results

sparta

secforce/sparta

Network Infrastructure Penetration Testing Tool

vulnerability-scannersinformation-gatheringnetwork-security+2

1.7k6 years ago

evillimiter

bitbrute/evillimiter

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

ids-ips-evasioninformation-gatheringnetwork-security+2

2k6 years ago

browser-identity-attacks-matrix

pushsecurity/browser-identity-attacks-matrix

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they…

osintreconnaissancephishing+6

1.4k6 months ago

KitHack

adrmxr/kithack

Hacking tools pack & backdoors generator.

android-securitypenetration-testing-frameworkswi-fi-auditing+6

2.1k1 year ago

icebreaker

danmcinerney/icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

password-crackingreconnaissancevulnerability-analysis+3

1.2k8 years ago

LinuxCheck

al0ne/linuxcheck

Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

vulnerability-scannerscontainer-securityconfiguration-auditing+5

2.1k2 years ago

BlackWidow

1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

osintweb-vulnerability-scannersvulnerability-analysis+3

1.8k6 months ago

cdncheck

projectdiscovery/cdncheck

A utility to detect various technology for a given IP address.

reconnaissancenetwork-mappinginformation-gathering+3

9841 day ago

legba

evilsocket/legba

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

password-crackingpassword-attacksinformation-gathering+2

1.9k2 months ago

criticality_score

ossf/criticality_score

Computes a criticality score for open source projects from repository, contributor, and dependency metrics to prioritize security improvements.

information-gatheringutilities-frameworkssupply-chain-security+1

1.5k2 months ago

twitter-advanced-search

igorbrigadir/twitter-advanced-search

Comprehensive reference guide to Twitter advanced search operators for precise social media data gathering, including filters for content, users,…

osintreconnaissanceinformation-gathering+2

1.6k2 years ago

LTESniffer

syssec-kaist/ltesniffer

An Open-source LTE Downlink/Uplink Eavesdropper

osintpacket-sniffing-analysisreconnaissance+5

2.2k2 years ago

PocList

1n7erface/poclist

Vulnerability-specific PoC scripts for discovering and exploiting RCE, SQLi, XXE, SSRF, and unauthorized-access flaws in enterprise web apps and…

vulnerability-analysisexploitationweb-application-exploitation+3

1.1k3 years ago

bypass-url-parser

laluka/bypass-url-parser

Tests hundreds of URL bypass techniques against 40X protected pages using raw curl requests, with multi-mode scanning, header spoofing, and JSON/HTML…

vulnerability-analysisinformation-gatheringwaf-bypass+2

1.1k15 days ago