Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
37 results
galer preview

galer

GitHubdwisiswant0/galer

A fast tool to fetch URLs from HTML attributes by crawl-in.

crawlerinformation-gatheringutilities-frameworks+1
2631 year ago
httrack preview

httrack

GitHubxroche/httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

crawlergeneral-purpose-utilitiesinformation-gathering
4.7k2 days ago
twint preview
Archived

twint

GitHubtwintproject/twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…

crawlerdata-exfiltrationeducation+6
16.4k3 years ago
meg preview

meg

GitHubtomnomnom/meg

Fetch many paths for many hosts - without killing the hosts

crawlerinformation-gatheringreconnaissance+1
1.7k4 years ago
xnLinkFinder preview

xnLinkFinder

GitHubxnl-h4ck3r/xnlinkfinder

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

crawlerinformation-gatheringpenetration-testing+3
1.6k5 months ago
urlfinder preview

urlfinder

GitHubprojectdiscovery/urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

crawlerdns-subdomain-enumerationinformation-gathering+5
89916 days ago
socialhunter preview
Archived

socialhunter

GitHubutkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked

crawlerosintphishing-tools+3
7751 year ago
jsmon preview

jsmon

GitHubrobre/jsmon

a javascript change monitoring tool for bugbounties

crawlerinformation-gatheringreconnaissance+1
7365 years ago
sterraxcyl preview
Archived

sterraxcyl

GitHubnovitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

crawlerinformation-gatheringosint+2
6832 years ago
sarenka preview

sarenka

GitHubktzgraph/sarenka

OSINT tool - gets data from services like shodan, censys etc. in one app

crawlerdns-analysishash-analysis+4
6744 years ago
Ominis-OSINT preview

Ominis-OSINT

GitHubanoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

crawlerinformation-gatheringosint+3
61014 days ago
maltrieve preview
Archived

maltrieve

GitHubkrmaxwell/maltrieve

A tool to retrieve malware directly from the source for security researchers.

crawlerinformation-gatheringmalware-analysis+2
5649 years ago
scripthunter preview

scripthunter

GitHubrobre/scripthunter

Tool to find JavaScript files on Websites

crawlerinformation-gatheringreconnaissance+1
5315 years ago
DarkScrape preview

DarkScrape

GitHubitsmehacker/darkscrape

OSINT Tool For Scraping Dark Websites

crawlerinformation-gatheringosint+1
5135 years ago
freedomfighting preview

freedomfighting

GitHubjusticerage/freedomfighting

A collection of scripts which may come in handy during your freedom fighting activities.

crawlerencryption-decryption-toolsforensics+8
4183 years ago
wappalyzer-next preview

wappalyzer-next

GitHubs0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

crawlerinformation-gatheringreconnaissance+1
4151 day ago
HTTPLoot preview

HTTPLoot

GitHubredhuntlabs/httploot

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

crawlerinformation-gatheringsecret-detection+1
4071 year ago
pagesource preview

pagesource

GitHubtimf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3
3597 months ago
Previous123Next