Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

310 results

Archived

ransomwatch

captaingeech42/ransomwatch

Ransomware leak site monitoring

osintvulnerability-analysisinformation-gathering+3

312

4 years ago

Archived

firebase

francesc-h/firebase

Exploiting misconfigured firebase databases

vulnerability-analysisdns-subdomain-enumerationdata-exfiltration+5

1247 years ago

Archived

instaloctrack

bernsteining/instaloctrack

An Instagram OSINT tool to collect all the geotagged locations available on an Instagram profile in order to plot them on a map, and dump them in a…

osintreconnaissanceinformation-gathering+2

3206 years ago

Archived

Bugs-feed

pwnedshell/bugs-feed

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

osintvulnerability-analysisinformation-gathering+2

934 years ago

Archived

EmailFinder

josue87/emailfinder

Search emails from a domain through search engines

osintreconnaissanceinformation-gathering+2

4243 years ago

Archived

MetaFinder

josue87/metafinder

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

osintreconnaissancedns-subdomain-enumeration+2

2212 years ago

Archived

kenzer

arpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

osintreconnaissancevulnerability-scanners+8

2883 years ago

Archived

sqlmate

s0md3v/sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.

password-crackingreconnaissancevulnerability-scanners+5

4537 years ago

Archived

SEcraper

zerobyte-id/secraper

Search engine scraper tool with BASH script.

osintreconnaissancescripting-automation+2

836 years ago

Archived

goop

s0md3v/goop

Google Search Scraper

osintreconnaissanceinformation-gathering+3

5717 years ago

Archived

Bashter

zerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

web-vulnerability-scannersvulnerability-analysisweb-security+3

594 years ago

Archived

SiteBroker

anon-exploiter/sitebroker

A cross-platform python based utility for information gathering and penetration testing automation!

reconnaissancevulnerability-scannersinformation-gathering+5

4302 years ago

Archived

celerystalk

sethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

reconnaissancevulnerability-scannersnetwork-mapping+8

4006 years ago

Archived

sqliv

the-robot/sqliv

massive SQL injection vulnerability scanner

reconnaissancevulnerability-scannersweb-vulnerability-scanners+2

1.2k8 years ago

Archived

gryffin

yahoo/gryffin

Gryffin is a large scale web security scanning platform.

vulnerability-scannersweb-vulnerability-scannersweb-security+3

2.1k5 years ago

Archived

megplus

edoverflow/megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

reconnaissancevulnerability-analysisinformation-gathering+5

3038 years ago

Archived

Belati

aancw/belati

The Traditional Swiss Army Knife for OSINT

osintreconnaissanceinformation-gathering+5

5645 years ago

Archived

scanless

vesche/scanless

online port scan scraper

reconnaissanceport-scanninginformation-gathering+3

1.1k3 years ago

Previous 1…161718 Next