Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
47 results
rebrowser-patches preview

rebrowser-patches

GitHubrebrowser/rebrowser-patches

Collection of patches for puppeteer and playwright to avoid automation detection and leaks. Helps to avoid Cloudflare and DataDome CAPTCHA pages.…

anti-botcaptcha-bypasscrawler+1
1.4k
1 year ago
tgscope preview

tgscope

GitHubitsmoorgrove/tgscope

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

crawlerdigital-forensicsinformation-gathering+1
22 days ago
RansomLook preview

RansomLook

GitHubransomlook/ransomlook

Yet another Ransomware gang tracker

crawlerdefensive-toolsinformation-gathering+3
6694 days ago
gorilla preview

gorilla

GitHubandreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

crawlerinformation-gatheringpassword-attacks+1
3917 months ago
cc.py preview

cc.py

GitHubsi9int/cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

crawlerinformation-gatheringosint+3
2779 months ago
Extracter preview

Extracter

GitHubk3ystr0k3r/extracter

A nice web-crawler written in Bash that will look for login pages/admin-panels for you on any given website.

crawlerinformation-gatheringosint+2
63 years ago
startpage-parser preview

startpage-parser

GitHubmindpatch/startpage-parser

parsing search results from startpage search engine (based on google.com results)

crawlergeneral-purpose-utilitiesinformation-gathering+2
175 years ago
Scrapegraph-ai preview

Scrapegraph-ai

GitHubscrapegraphai/scrapegraph-ai

Python scraper based on AI

ai-securitycrawlereducation+4
30.9k6 days ago
webanalyze preview

webanalyze

GitHubrverton/webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

crawlerinformation-gatheringosint+3
1.2k16 days ago
SeekYou preview

SeekYou

GitHubteycir/seekyou

OSINT intelligence on any IP, domain, or ASN

cloud-securitycrawlerdns-analysis+9
192 months ago
phantomstars preview

phantomstars

GitHubtg12/phantomstars

Automated detection and tracking of fake engagement on GitHub — daily CI, zero infrastructure

anti-botcrawlercurated-resources+6
762 months ago
sigint preview

sigint

GitLabiitoneloc/sigint

Real-time OSINT intelligence dashboard: 7 live data sources (aircraft, AIS vessels, seismic, fires, weather, GDELT events, news) on an interactive…

crawlerdata-exfiltrationdns-analysis+4
4 months ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

crawlerdns-subdomain-enumerationemail-harvesting+8
37.5k1 day ago
CVE-2024-39722 preview

CVE-2024-39722

GitHubsrcx404/cve-2024-39722

Exploit tool for CVE-2024-39722, a model existence disclosure vulnerability in Ollama. Performs version checks, crawls official model library, and…

crawlerexploitationinformation-gathering+3
1 year ago
polymaster preview

polymaster

GitHubneur0map/polymaster

Monitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection

anomaly-detectioncrawlerdata-exfiltration+3
2511h 40m ago
Project-Eyes-On preview

Project-Eyes-On

GitHuby0oshi/project-eyes-on

Project Eyes On is a high-speed, multi-threaded surveillance tool by Y0oshi (@rde0) for locating open IP cameras worldwide. Unifies Google Dorking…

crawlerdns-subdomain-enumerationinformation-gathering+4
24318 days ago
on-device-browser-agent preview

on-device-browser-agent

GitHubrunanywhereai/on-device-browser-agent

On-device AI browser automation using WebLLM. No cloud, no API keys, fully private.

ai-securitycrawlereducation+3
30125 days ago
autopentest-ai preview

autopentest-ai

GitHubbhavsec/autopentest-ai

Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.

crawlereducationexploit-frameworks+8
2276 months ago
Previous123Next