Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

311 results

InstaLooter

althonos/instalooter

Another API-less Instagram pictures and videos downloader. (defunct)

osintinformation-gatheringcrawler

2.1k5 years ago

noinstagram

datvance/noinstagram

"follow" instagram users/tags without an IG account

osintinformation-gatheringsocial-engineering+1

326 years ago

VK-Scraper

vanyasem/vk-scraper

Command-line tool to scrape and download media (photos, videos, stories) from VKontakte users and communities using the VK API. Supports multiple…

general-purpose-utilitiesosintinformation-gathering+1

593 years ago

tiktok-scraper

dutchosintguy/tiktok-scraper

Scrape and download TikTok video posts and metadata from user profiles, hashtags, and trends without authentication. Outputs JSON, CSV, and ZIP…

osintinformation-gatheringsocial-engineering+1

137 years ago

huntr-com-bug-bounties-collector

password123456/huntr-com-bug-bounties-collector

Automated crawler that monitors and collects new bug bounty vulnerability postings from huntr.com, extracting CVE IDs, severity levels, and affected…

vulnerability-analysisinformation-gatheringcrawler

122 years ago

ProxyBroker

constverum/proxybroker

Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS :performing_arts:

privacycrawler

4.2k7 years ago

Uscrapper

z0m31en7/uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface…

osintreconnaissancedata-exfiltration+4

7871 year ago

Crawlector

mfmokbel/crawlector

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

osintvulnerability-scannersthreat-feeds-aggregators+5

12310 months ago

cve-collector

password123456/cve-collector

Automated CVE collector that crawls cvedetails.com, parses HTML for vulnerabilities with CVSS ≥ 6, and stores results in a delimiter-based file…

vulnerability-analysisinformation-gatheringthreat-intelligence+1

602 years ago

SpiderSuite

spidersuite/spidersuite

Advanced cross-platform web crawler for security professionals, enabling automated reconnaissance, information gathering, and OSINT data collection…

osintreconnaissanceinformation-gathering+2

9712 months ago

Pinkerton

0xdsm/pinkerton

🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

information-gatheringweb-securitysecret-detection+1

4406 months ago

firecrawl-mcp-server

firecrawl/firecrawl-mcp-server

MCP server providing web scraping, crawling, and search capabilities for AI agents. Supports structured data extraction, interactive browsing, and…

information-gatheringutilities-frameworkscrawler

7.2k13h 26m ago

katana

projectdiscovery/katana

A next-generation crawling and spidering framework.

reconnaissanceweb-vulnerability-scannersdynamic-code-analysis+7

17.3k1h 28m ago

EasySpider

naibowang/easyspider

A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/网页爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。

scripting-automationweb-securityeducation+1

44.4k2 days ago

wappalyzer-next

s0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

reconnaissanceinformation-gatheringweb-security+1

41320 days ago

urx

hahwul/urx

Extracts URLs from OSINT Archives for Security Insights

osintreconnaissanceinformation-gathering+2

1904 days ago

Scrapling

d4vinci/scrapling

Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…

dynamic-analysis-sandboxingweb-securitycrawler+2

73.4k2 days ago

Ominis-OSINT

anoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

osintreconnaissanceosint-social-engineering+3

6041 month ago

Previous 1…131415…18 Next