Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

87 results

Archived

instaloctrack

bernsteining/instaloctrack

An Instagram OSINT tool to collect all the geotagged locations available on an Instagram profile in order to plot them on a map, and dump them in a…

crawlerinformation-gatheringosint+2

323

6 years ago

Archived

twint

twintproject/twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…

crawlerdata-exfiltrationeducation+6

16.4k3 years ago

Archived

SEcraper

zerobyte-id/secraper

Search engine scraper tool with BASH script.

crawlerinformation-gatheringosint+2

836 years ago

Archived

sterraxcyl

novitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

crawlerinformation-gatheringosint+2

6802 years ago

Archived

maltrieve

krmaxwell/maltrieve

A tool to retrieve malware directly from the source for security researchers.

crawlerinformation-gatheringmalware-analysis+2

5649 years ago

pagesource

timf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3

3609 months ago

Vxscan

al0ne/vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

crawlerinformation-gatheringosint+7

1.8k6 years ago

domain_analyzer

eldraco/domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

crawlerdns-analysisinformation-gathering+5

1.9k3 years ago

meg

tomnomnom/meg

Fetch many paths for many hosts - without killing the hosts

crawlerinformation-gatheringreconnaissance+1

1.7k4 years ago

wappalyzer-next

s0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

crawlerinformation-gatheringreconnaissance+1

42110 days ago

festin

cr0hn/festin

FestIn - Open S3 Bucket Scanner

cloud-securitycrawlerdns-analysis+3

2321 month ago

endext

sirbugs/endext

Extracts all possible endpoints, URLs, and paths from JavaScript files using customizable regex patterns for web application reconnaissance and API…

crawlerinformation-gatheringreconnaissance+1

2212 years ago

dorkscout

r4ygm/dorkscout

Automated Google dork scanner that fetches exploit-db dork lists and scans targets or the entire internet for vulnerable applications, secret files,…

crawlerinformation-gatheringosint+2

2435 years ago

jsfinder

kacakb/jsfinder

Fetches JavaScript files quickly and comprehensively.

crawlerinformation-gatheringreconnaissance+1

1373 years ago

mapsdumper

tegal1337/mapsdumper

Dump place details from Google Maps like phone,email,website,and reviews

crawleremail-harvestinginformation-gathering+1

751 year ago

ClickonceHunter

zyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

crawlerinformation-gatheringosint+1

931 year ago

PenScope

spider12223/penscope

Passive recon & attack surface mapper — zero requests sent

crawlerexploitationinformation-gathering+7

375 months ago

gaia

oksuzkayra/gaia

Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.

ai-securitycrawlerinformation-gathering+7

469 months ago

Previous 1 2 345 Next