Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
58 results
dnsReaper preview

dnsReaper

GitHubpunk-security/dnsreaper

Fast subdomain takeover scanner with 50+ signatures, supporting cloud provider integrations (AWS, Azure, Cloudflare) and CI/CD pipeline mode for…

cloud-securitydevsecopsdns-analysis+2
2.2k
1 year ago
tko-subs preview

tko-subs

GitHubanshumanbh/tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

cloud-securitydns-analysispenetration-testing+2
7735 years ago
frogy2.0 preview

frogy2.0

GitHubiamthefrogy/frogy2.0

Orbis is an full spectrum automated external attack surface intelligent toolkit.

cloud-securitydns-analysisemail-security+9
4131 month ago
HostileSubBruteforcer preview

HostileSubBruteforcer

GitHubnahamsec/hostilesubbruteforcer

Subdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…

cloud-securitydns-subdomain-enumerationinformation-gathering+3
4829 years ago
festin preview

festin

GitHubcr0hn/festin

FestIn - Open S3 Bucket Scanner

cloud-securitycrawlerdns-analysis+3
23229 days ago
cloudfrunt preview

cloudfrunt

GitHubmindpointgroup/cloudfrunt

A tool for identifying misconfigured CloudFront domains

cloud-securitydns-subdomain-enumerationmisconfiguration+1
3608 years ago
globalping-probe preview

globalping-probe

GitHubjsdelivr/globalping-probe

The globalping probe code that runs on your hardware and connects to the global community network of probes

cloud-securitydevsecopsdns-analysis+3
2122 days ago
EasyEASM preview

EasyEASM

GitHubg0ldencybersec/easyeasm

Zero-dollar attack surface management tool

cloud-securitydns-analysisdns-subdomain-enumeration+7
3332 years ago
s3enum preview

s3enum

GitHubkoenrh/s3enum

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

cloud-securitydns-analysisinformation-gathering+2
2823 months ago
warcannon preview

warcannon

GitHubc6fc/warcannon

High speed/Low cost CommonCrawl RegExp in Node.js

cloud-securitycrawlerdata-exfiltration+3
2562 years ago
ayaFlow preview

ayaFlow

GitHubdavidhavoc/ayaflow

A high-performance, eBPF-based network traffic analyzer written in Rust.

cloud-securitydns-analysisnetwork-mapping+2
2862 months ago
edge preview

edge

GitHubiknowjason/edge

Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

cloud-securitydns-analysisinformation-gathering+4
1870 years ago
AADOutsider-py preview

AADOutsider-py

GitHubsynacktiv/aadoutsider-py

Python3 rewrite of AsOutsider features of AADInternals

authenticationcloud-securitydns-analysis+7
6419 days ago
mass3 preview

mass3

GitHubsmiegles/mass3

Multi-threaded DNS-based enumeration tool for discovering AWS S3 buckets using pre-compiled wordlists and custom DNS resolvers, with optional Docker…

cloud-securitydns-analysisinformation-gathering+2
1267 years ago
Taken preview

Taken

GitHubin3tinct/taken

Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.

cloud-securitydns-subdomain-enumerationexploitation+3
941 year ago
Cloudcheck preview

Cloudcheck

GitHubank1036official/cloudcheck

Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.

cloud-securitydns-analysisinformation-gathering+2
485 years ago
CloudHunter preview

CloudHunter

GitHub1n3/cloudhunter

Find unreferenced AWS S3 buckets which have CloudFront CNAME records pointing to them

cloud-securitydns-analysisinformation-gathering+2
358 years ago
SeekYou preview

SeekYou

GitHubteycir/seekyou

OSINT intelligence on any IP, domain, or ASN

cloud-securitycrawlerdns-analysis+9
193 months ago
Previous1234Next