Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
72 results
pryingdeep preview
Archived

pryingdeep

GitHubiudicium/pryingdeep

Prying Deep - An OSINT tool to collect intelligence on the dark web.

crawlerinformation-gatheringosint+3
620
2 years ago
SearchPhone preview

SearchPhone

GitHubhackunderway/searchphone

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

crawleremail-harvestinginformation-gathering+5
2.1k2 months ago
meg preview

meg

GitHubtomnomnom/meg

Fetch many paths for many hosts - without killing the hosts

crawlerinformation-gatheringreconnaissance+1
1.7k4 years ago
wappalyzer-next preview

wappalyzer-next

GitHubs0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

crawlerinformation-gatheringreconnaissance+1
4131 month ago
festin preview

festin

GitHubcr0hn/festin

FestIn - Open S3 Bucket Scanner

cloud-securitycrawlerdns-analysis+3
2331 month ago
endext preview

endext

GitHubsirbugs/endext

Extracts all possible endpoints, URLs, and paths from JavaScript files using customizable regex patterns for web application reconnaissance and API…

crawlerinformation-gatheringreconnaissance+1
2192 years ago
dorkscout preview

dorkscout

GitHubr4ygm/dorkscout

Automated Google dork scanner that fetches exploit-db dork lists and scans targets or the entire internet for vulnerable applications, secret files,…

crawlerinformation-gatheringosint+2
2445 years ago
jsfinder preview

jsfinder

GitHubkacakb/jsfinder

Fetches JavaScript files quickly and comprehensively.

crawlerinformation-gatheringreconnaissance+1
1373 years ago
mapsdumper preview

mapsdumper

GitHubtegal1337/mapsdumper

Dump place details from Google Maps like phone,email,website,and reviews

crawleremail-harvestinginformation-gathering+1
731 year ago
ClickonceHunter preview

ClickonceHunter

GitHubzyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

crawlerinformation-gatheringosint+1
931 year ago
httpgrep preview

httpgrep

GitHubnoptrix/httpgrep

Async HTTP(S) scanner that greps response bodies and headers for strings or regex across hosts, ports, CIDR/ranges and TLS-cert vhosts.

crawlerinformation-gatheringpenetration-testing+3
3618 days ago
PenScope preview

PenScope

GitHubspider12223/penscope

Passive recon & attack surface mapper — zero requests sent

crawlerexploitationinformation-gathering+7
336 months ago
CVE-2025-6325_CVE-2025-6327 preview

CVE-2025-6325_CVE-2025-6327

GitHubjohenlastgen-jlg/cve-2025-6325_cve-2025-6327

Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…

crawlerexploitationpayload-development+7
1 month ago
ransomwatch preview
Archived

ransomwatch

GitHubcaptaingeech42/ransomwatch

Ransomware leak site monitoring

crawlerincident-responseinformation-gathering+3
3124 years ago
Belati preview
Archived

Belati

GitHubaancw/belati

The Traditional Swiss Army Knife for OSINT

crawlerdns-analysiseducation+5
5647 years ago
socialhunter preview
Archived

socialhunter

GitHubutkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked

crawlerosintphishing-tools+3
7791 year ago
EmailAll preview

EmailAll

GitHubtaonn/emailall

Collects email addresses for a target domain by querying search engines, GitHub API, PhoneBook, Snov, Skymem and other OSINT sources, saving results…

crawleremail-harvestinginformation-gathering+4
7544 years ago
webpalm preview

webpalm

GitHubxorbit01/webpalm

Multi-threaded web crawler for structured site mapping and regex-based data extraction. Exports results in JSON, XML, or TXT for reconnaissance and…

crawlerinformation-gatheringosint+2
3821 year ago
Previous1234Next