Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

311 results

birdy-edwards

jeet-ganguly/birdy-edwards

Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…

osintinformation-gatheringsocial-engineering+3

16 days ago

robin

apurvsinghgautam/robin

AI-powered dark web OSINT tool that uses LLMs to refine queries, filter search results, and generate investigation summaries with a web UI and Docker…

osintinformation-gatheringprivacy+3

7.6k16 days ago

log4j-dork-scanner

timborin0/log4j-dork-scanner

A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks

osintvulnerability-scannersexploitation+3

4 years ago

puppeteer-extra

berstend/puppeteer-extra

💯 Teach puppeteer new tricks through plugins.

scripting-automationutilities-frameworkscrawler+2

7.4k3 years ago

undetected-chromedriver

ultrafunkamsterdam/undetected-chromedriver

Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)

waf-bypasscrawleranti-bot+2

12.9k1 year ago

rebrowser-patches

rebrowser/rebrowser-patches

Collection of patches for puppeteer and playwright to avoid automation detection and leaks. Helps to avoid Cloudflare and DataDome CAPTCHA pages.…

crawleranti-botfingerprint-spoofing+1

1.4k19h 49m ago

cloudscraper

venomous/cloudscraper

A Python module to bypass Cloudflare's anti-bot page.

web-proxies-interceptionimpersonation-toolswaf-bypass+4

6.8k1 year ago

fingerprint-suite

apify/fingerprint-suite

Browser fingerprinting tools for anonymizing your scrapers. Developed by Apify.

privacycrawleranti-bot+2

2.6k5 days ago

playwright

microsoft/playwright

Browser automation framework with a single API for Chromium, Firefox, and WebKit. Supports web testing, scraping, screenshots, and network…

general-purpose-utilitiesscripting-automationcrawler+2

98.1k5h 50m ago

wapiti

wapiti-scanner/wapiti

Web vulnerability scanner written in Python3

vulnerability-scannersweb-vulnerability-scannerspassword-attacks+11

1.9k15 days ago

tgscope

itsmoorgrove/tgscope

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

osintinformation-gatheringdigital-forensics+1

1 month ago

Oneliner-Bugbounty

daffainfo/oneliner-bugbounty

A collection oneliner scripts for bug bounty

vulnerability-scannersweb-application-exploitationinformation-gathering+6

1842 years ago

ClickonceHunter

zyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

osintreconnaissanceinformation-gathering+1

931 year ago

RansomLook

ransomlook/ransomlook

Yet another Ransomware gang tracker

defensive-toolsosintthreat-feeds-aggregators+3

6454 days ago

czds

msadministrator/czds

A Python package to download Zone Files from the Centralized Zone Data Service hosted by ICAAN.

osintreconnaissanceinformation-gathering+2

171 year ago

netscout

caio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

osintreconnaissancedns-subdomain-enumeration+3

1822 years ago

thermoptic

mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

web-proxies-interceptionimpersonation-toolsinformation-gathering+5

1.0k14 days ago

gorilla

andreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

password-crackingpassword-attacksinformation-gathering+1

3908 months ago

Previous 123…18 Next