Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

318 results

voidaccess

katrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

crawlerdata-exfiltrationencryption-decryption-tools+8

789

3h 10m ago

LangAlpha

ginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

crawlerdata-exfiltrationinformation-gathering+6

1.8k5h 3m ago

nuclei-templates

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

code-analysiscrawlercurated-resources+6

13.1k5h 41m ago

firecrawl-mcp-server

firecrawl/firecrawl-mcp-server

MCP server providing web scraping, crawling, and search capabilities for AI agents. Supports structured data extraction, interactive browsing, and…

crawlerinformation-gatheringutilities-frameworks

7.6k7h 47m ago

miasma

austin-weeks/miasma

Trap AI web scrapers in an endless poison pit.

ai-securityanti-botcrawler+3

1.2k9h 40m ago

toolbox

go-appsec/toolbox

Collaborative application security testing between humans and agents via CLI and MCP

api-security-testingcrawlerdynamic-analysis-sandboxing+8

4310h 57m ago

sqlmap

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

api-securityapi-security-testingcrawler+12

38.6k12h 46m ago

instaloader

instaloader/instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

crawlerdata-exfiltrationemail-harvesting+5

13.6k14h 5m ago

patchright

kaliiiiiiiiii-vinyzu/patchright

Undetected version of the Playwright testing and automation library.

anti-botcrawlerfingerprint-spoofing+2

4.8k15h 39m ago

searxng

searxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…

crawlergeneral-purpose-utilitiesinformation-gathering+2

38.2k16h 14m ago

Scrapling

d4vinci/scrapling

Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…

anti-botcrawlerdynamic-analysis-sandboxing+2

86.9k19h 54m ago

gowitness

sensepost/gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

crawlerinformation-gatheringreconnaissance+1

4.5k1 day ago

camoufox

daijro/camoufox

🦊 Anti-detect browser

anti-botcrawlerfingerprint-spoofing+1

12.5k1 day ago

wappalyzergo

projectdiscovery/wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

crawlerinformation-gatheringreconnaissance+2

1.1k1 day ago

maigret

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

crawlerdns-subdomain-enumerationemail-harvesting+8

38.8k1 day ago

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

ai-securitycrawlerdns-analysis+7

88.3k1 day ago

grubcrawler

deepbluedynamics/grubcrawler

The world's fastest agentic crawler. Reclaimed. Reinvented. Ready for war.

anti-botcrawlerdynamic-analysis-sandboxing+9

411 day ago

httpx

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18

10.5k1 day ago

Previous12…18 Next