Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
37 results
hostscan preview

hostscan

GitHubsmaash/hostscan

php tool for network scanning

crawlerinformation-gatheringnetwork-mapping+5
2011 years ago
SCRAPPER preview

SCRAPPER

GitHubbunelysiareact/scrapper

Scrap the web way to easy

api-security-testingcrawlerdebuggers+6
145 months ago
JS-Secret-Hunter preview

JS-Secret-Hunter

GitHubsohelyousef/js-secret-hunter

Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.

crawlerinformation-gatheringpenetration-testing+3
7 months ago
swarm preview

swarm

GitHuba7vinx/swarm

A modular distributed penetration testing tool.

crawlerinformation-gatheringpenetration-testing+4
419 years ago
Ominis-OSINT preview

Ominis-OSINT

GitHubanoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

crawlerinformation-gatheringosint+3
61014 days ago
Egyscan preview

Egyscan

GitHubdragonked2/egyscan

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…

crawlerinformation-gatheringpenetration-testing+4
3012 days ago
jsfinder preview

jsfinder

GitHubkacakb/jsfinder

Fetches JavaScript files quickly and comprehensively.

crawlerinformation-gatheringreconnaissance+1
1383 years ago
SEcraper preview
Archived

SEcraper

GitHubzerobyte-id/secraper

Search engine scraper tool with BASH script.

crawlerinformation-gatheringosint+2
836 years ago
meg preview

meg

GitHubtomnomnom/meg

Fetch many paths for many hosts - without killing the hosts

crawlerinformation-gatheringreconnaissance+1
1.7k4 years ago
socialhunter preview
Archived

socialhunter

GitHubutkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked

crawlerosintphishing-tools+3
7751 year ago
twint preview
Archived

twint

GitHubtwintproject/twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…

crawlerdata-exfiltrationeducation+6
16.4k3 years ago
pagesource preview

pagesource

GitHubtimf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3
3597 months ago
jsmon preview

jsmon

GitHubrobre/jsmon

a javascript change monitoring tool for bugbounties

crawlerinformation-gatheringreconnaissance+1
7365 years ago
sarenka preview

sarenka

GitHubktzgraph/sarenka

OSINT tool - gets data from services like shodan, censys etc. in one app

crawlerdns-analysishash-analysis+4
6744 years ago
wappalyzer-next preview

wappalyzer-next

GitHubs0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

crawlerinformation-gatheringreconnaissance+1
4151 day ago
httrack preview

httrack

GitHubxroche/httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

crawlergeneral-purpose-utilitiesinformation-gathering
4.7k2 days ago
freedomfighting preview

freedomfighting

GitHubjusticerage/freedomfighting

A collection of scripts which may come in handy during your freedom fighting activities.

crawlerencryption-decryption-toolsforensics+8
4183 years ago
PenScope preview

PenScope

GitHubspider12223/penscope

Passive recon & attack surface mapper — zero requests sent

crawlerexploitationinformation-gathering+7
353 months ago
Previous123Next