Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
323 results
dark-web-osint-tools preview

dark-web-osint-tools

GitHubapurvsinghgautam/dark-web-osint-tools

OSINT Tools for the Dark Web

crawlerdns-subdomain-enumerationinformation-gathering+4
2.6k
2 months ago
cariddi preview

cariddi

GitHubedoardottt/cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

crawlerinformation-gatheringosint+4
3.8k4h 54m ago
spider preview

spider

GitHubspider-rs/spider

Get web data for AI agents and LLMs

ai-securityanti-botcrawler+2
2.8k2 days ago
fingerprint-suite preview

fingerprint-suite

GitHubapify/fingerprint-suite

Browser fingerprinting tools for anonymizing your scrapers. Developed by Apify.

anti-botcaptcha-bypasscrawler+2
2.6k8 days ago
LangAlpha preview

LangAlpha

GitHubginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

crawlerdata-exfiltrationinformation-gathering+6
2.0k1h 50m ago
waybackurls preview

waybackurls

GitHubtomnomnom/waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

crawlerinformation-gatheringosint+3
4.6k4 years ago
Scavenger preview

Scavenger

GitHubrndinfosecguy/scavenger

Crawler (Bot) searching for credential leaks on paste sites.

crawlerdata-exfiltrationinformation-gathering+2
8578 days ago
crawlergo preview

crawlergo

GitHubqianlitp/crawlergo

A powerful browser crawler for web vulnerability scanners

crawlerinformation-gatheringreconnaissance+2
3.0k1 year ago
recon-skills preview

recon-skills

GitHubuphiago/recon-skills

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

cloud-securitycrawlerexploitation+9
1.3k1 month ago
rebrowser-patches preview

rebrowser-patches

GitHubrebrowser/rebrowser-patches

Collection of patches for puppeteer and playwright to avoid automation detection and leaks. Helps to avoid Cloudflare and DataDome CAPTCHA pages.…

anti-botcaptcha-bypasscrawler+1
1.4k2 days ago
octosuite preview

octosuite

GitHubbellingcat/octosuite

Terminal-based toolkit for GitHub data analysis.

crawlerinformation-gatheringosint+1
1.9k1 month ago
GeoSentinel preview

GeoSentinel

GitHubh9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

crawlerdata-exfiltrationdns-subdomain-enumeration+7
1.1k1 month ago
requests-ip-rotator preview

requests-ip-rotator

GitHubge0rg3/requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

crawlerids-ips-evasioninformation-gathering+5
1.7k3 months ago
meg preview

meg

GitHubtomnomnom/meg

Fetch many paths for many hosts - without killing the hosts

crawlerinformation-gatheringreconnaissance+1
1.7k4 years ago
skipfish preview

skipfish

GitHubspinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

crawlerdynamic-analysis-sandboxingfuzzing+7
88413 years ago
BugBountyScanner preview

BugBountyScanner

GitHubchvancooten/bugbountyscanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

crawlerinformation-gatheringpenetration-testing+5
92511 months ago
trawl preview

trawl

GitHubgermondai/trawl

Self-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr…

anti-botcaptcha-bypasscrawler+5
1.0k1 day ago
SpiderSuite preview

SpiderSuite

GitHubspidersuite/spidersuite

Advanced cross-platform web crawler for security professionals, enabling automated reconnaissance, information gathering, and OSINT data collection…

crawlerinformation-gatheringosint+2
9872 months ago
Previous1…345…18Next