Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

267 results

httpx

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18

10.5k

1h 44m ago

gowitness

sensepost/gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

crawlerinformation-gatheringreconnaissance+1

4.5k1h 50m ago

Shadowbroker

bigbodycobain/shadowbroker

Real-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…

command-and-controlcrawlerdns-analysis+7

11.3k11h 22m ago

LangAlpha

ginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

crawlerdata-exfiltrationinformation-gathering+6

1.8k12h 56m ago

wappalyzergo

projectdiscovery/wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

crawlerinformation-gatheringreconnaissance+2

1.1k15h 9m ago

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

ai-securitycrawlerdns-analysis+7

88.2k17h 9m ago

searxng

searxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…

crawlergeneral-purpose-utilitiesinformation-gathering+2

38.2k19h 4m ago

nuclei-wordfence-cve

topscoder/nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

crawlerexploitationinformation-gathering+3

1.3k1 day ago

AIL-framework

circl/ail-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

crawlerdata-exfiltrationdigital-forensics+8

1.4k1 day ago

kuri

justrach/kuri

Browser automation, web crawling, and iOS + Android device control for AI agents. Zig-native, token-efficient CDP snapshots, HAR recording, native…

crawlerinformation-gatheringmobile-security+2

3651 day ago

firecrawl-mcp-server

firecrawl/firecrawl-mcp-server

MCP server providing web scraping, crawling, and search capabilities for AI agents. Supports structured data extraction, interactive browsing, and…

crawlerinformation-gatheringutilities-frameworks

7.6k1 day ago

maigret

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

crawlerdns-subdomain-enumerationemail-harvesting+8

38.6k1 day ago

sif

vmfunc/sif

the blazing-fast pentesting suite.

crawlerdns-analysisexploitation+7

5831 day ago

httrack

xroche/httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

crawlergeneral-purpose-utilitiesinformation-gathering

4.8k1 day ago

urx

hahwul/urx

Extracts URLs from OSINT Archives for Security Insights

crawlerinformation-gatheringosint+2

1941 day ago

deadfinder

hahwul/deadfinder

Fast CLI tool to scan websites, sitemaps, and URL lists for broken links, with concurrent workers, coverage reporting, and multiple output formats.

crawlerinformation-gatheringweb-security

1871 day ago

katana

projectdiscovery/katana

A next-generation crawling and spidering framework.

api-securityapi-security-testingcrawler+7

17.6k2 days ago

Agent-Reach

panniantong/agent-reach

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

ai-securitycrawlergeneral-purpose-utilities+5

93.8k2 days ago

Previous12…15 Next