Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
95 results
darkfox preview

darkfox

GitHubaryanguenthner/darkfox

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

crawlerforensicsinformation-gathering+6
190
1 month ago
Darkus preview

Darkus

GitHublucksi/darkus

Searches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…

crawlergeneral-purpose-utilitiesinformation-gathering+3
7048 months ago
EmailAll preview

EmailAll

GitHubtaonn/emailall

Collects email addresses for a target domain by querying search engines, GitHub API, PhoneBook, Snov, Skymem and other OSINT sources, saving results…

crawleremail-harvestinginformation-gathering+4
7544 years ago
LFITester preview

LFITester

GitHubkostas-pa/lfitester

Python3 tool that detects and exploits Local File Inclusion vulnerabilities, with crawling, path traversal and filter bypass payloads, and automated…

crawlerexploitationfuzzing+7
1121 year ago
mitm-proxy-ja3-ja4 preview

mitm-proxy-ja3-ja4

GitHub3radiance/mitm-proxy-ja3-ja4

Configurable Rust HTTP MITM proxy with TLS , HTTP/2 and TCP fingerprint spoofing.

anti-botcrawlerencryption-decryption-tools+7
528 days ago
xssearch preview

xssearch

GitHubaffolter-engineering/xssearch

Rust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.

crawlerinformation-gatheringpayload-generation+9
64 days ago
SearchPhone preview

SearchPhone

GitHubhackunderway/searchphone

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

crawleremail-harvestinginformation-gathering+5
2.1k2 months ago
crawlee preview

crawlee

GitHubapify/crawlee

Node.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…

anti-botcrawlerfingerprint-spoofing+6
26.3k15h 3m ago
APIHarvester preview

APIHarvester

GitHubpiratesshield/apiharvester

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

api-securityapi-security-testingcrawler+9
353 months ago
proxy-workbench preview

proxy-workbench

GitHubdavidvoitenko/proxy-workbench

Collects, checks and ranks public HTTP/SOCKS proxies against your own targets, then serves them via ranked exports, pools, a rotating gateway and a…

crawlergeneral-purpose-utilitiesinformation-gathering+5
161 month ago
SOCMIntelligence preview

SOCMIntelligence

GitHubemrekybs/socmintelligence

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

crawlerdigital-forensicsidentity-management+8
314 days ago
CVE-2025-6325_CVE-2025-6327 preview

CVE-2025-6325_CVE-2025-6327

GitHubjohenlastgen-jlg/cve-2025-6325_cve-2025-6327

Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…

crawlerexploitationpayload-development+7
1 month ago
Agent-Reach preview

Agent-Reach

GitHubpanniantong/agent-reach

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

ai-securitycrawlergeneral-purpose-utilities+5
107.0k6 days ago
birdy-edwards preview

birdy-edwards

GitHubjeet-ganguly/birdy-edwards

Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…

ai-securitycrawlerinformation-gathering+3
9728 days ago
robin preview

robin

GitHubapurvsinghgautam/robin

AI-powered dark web OSINT tool that uses LLMs to refine queries, filter search results, and generate investigation summaries with a web UI and Docker…

ai-securitycrawlerinformation-gathering+3
7.8k28 days ago
puppeteer-extra preview

puppeteer-extra

GitHubberstend/puppeteer-extra

💯 Teach puppeteer new tricks through plugins.

captcha-bypasscrawlerfingerprint-spoofing+2
7.4k3 years ago
ClickonceHunter preview

ClickonceHunter

GitHubzyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

crawlerinformation-gatheringosint+1
931 year ago
netscout preview

netscout

GitHubcaio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

crawlerdns-subdomain-enumerationinformation-gathering+3
1832 years ago
Previous123456Next