Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
123 results
brpc preview

brpc

GitHubapache/brpc

Industrial-grade C++ RPC framework for building high-performance distributed systems, supporting multiple protocols (HTTP, gRPC, Redis, Thrift) with…

api-securitycloud-securitygeneral-purpose-utilities+3
17.6k8h 30m ago
s3dns preview

s3dns

GitHubolizimmermann/s3dns

Passive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…

cloud-securitydns-analysisinformation-gathering+5
1291 day ago
cdncheck preview

cdncheck

GitHubprojectdiscovery/cdncheck

A utility to detect various technology for a given IP address.

cloud-securitydns-analysisinformation-gathering+3
9841 day ago
claude-bug-bounty preview

claude-bug-bounty

GitHubshuvonsec/claude-bug-bounty

AI-powered bug bounty hunting toolkit that works with or without subscription.

ai-securitycloud-securityexploitation+8
4.2k6 days ago
offensive-azure preview

offensive-azure

GitHubblacklanternsecurity/offensive-azure

Collection of offensive tools targeting Microsoft Azure

cloud-securityinformation-gatheringpassword-attacks+4
2268 days ago
cloudlist preview

cloudlist

GitHubprojectdiscovery/cloudlist

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

cloud-securityinformation-gatheringreconnaissance
1.0k8 days ago
globalping-probe preview

globalping-probe

GitHubjsdelivr/globalping-probe

The globalping probe code that runs on your hardware and connects to the global community network of probes

cloud-securitydevsecopsdns-analysis+3
2079 days ago
PurplePanda preview

PurplePanda

GitHubcarlospolop/purplepanda

Identify privilege escalation paths within and across different clouds

cloud-securityinformation-gatheringpenetration-testing+3
71912 days ago
AzSubEnum preview

AzSubEnum

GitHubyuyudhn/azsubenum

DNS-based subdomain enumeration tool for Azure services, probing App Services, Storage Accounts, Databases, Key Vaults, and CDN endpoints via…

cloud-securityinformation-gatheringpenetration-testing+2
8014 days ago
AzureRedOps preview

AzureRedOps

GitHubmr-un1k0d3r/azureredops

Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

authenticationcloud-securityexploitation+8
18015 days ago
AzureHound preview

AzureHound

GitHubspecterops/azurehound

Collects Azure tenant data (users, groups, roles, resources) and exports it for BloodHound attack path analysis in cloud penetration testing and red…

cloud-securityinformation-gatheringosint+2
94318 days ago
untitledgoosetool preview

untitledgoosetool

GitHubcisagov/untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

cloud-securitydefensive-toolsdigital-forensics+4
96321 days ago
faraday_agent_dispatcher preview

faraday_agent_dispatcher

GitHubinfobyte/faraday_agent_dispatcher

Faraday Agent Dispatcher launches any security tools and send results to Faradaysec Platform.

cloud-securitydevsecopsinformation-gathering+5
4828 days ago
osmedeus preview

osmedeus

GitHubj3ssie/osmedeus

A Modern Orchestration Engine for Security

cloud-securitydevsecopsinformation-gathering+5
6.5k1 month ago
cloud_enum preview

cloud_enum

GitHubinitstring/cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloud-securityinformation-gatheringosint+2
2.1k1 month ago
cirro preview

cirro

GitHubbishopfox/cirro

Creating attacks paths across management and data planes

cloud-securityidentity-access-managementinformation-gathering+4
641 month ago
CredSpy preview

CredSpy

GitHubredbyte1337/credspy

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

authenticationcloud-securityidentity-access-management+5
1651 month ago
EntraFalcon preview

EntraFalcon

GitHubcompasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

cloud-securityidentity-access-managementinformation-gathering+3
4581 month ago
Previous1234567Next