Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

49 results

webanalyze

rverton/webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

crawlerinformation-gatheringosint+3

1.2k13 days ago

wappalyzergo

projectdiscovery/wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

crawlerinformation-gatheringreconnaissance+2

1.1k5 days ago

HTTPLoot

redhuntlabs/httploot

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

crawlerinformation-gatheringsecret-detection+1

4051 year ago

gospider

jaeles-project/gospider

Gospider - Fast web spider written in Go

crawlerinformation-gatheringosint+2

3.0k2 years ago

pastego

notdodo/pastego

Scrape/Parse Pastebin using GO and expression grammar (PEG)

crawlerinformation-gatheringosint+1

964 years ago

ffuf

ffuf/ffuf

Fast web fuzzer written in Go

api-securityapi-security-testingcrawler+12

16.8k6 days ago

go-dork

dwisiswant0/go-dork

The fastest dork scanner written in Go.

crawlerdns-subdomain-enumerationinformation-gathering+2

1.3k2 years ago

ChangeTower

dc4ts/changetower

Lightweight web page change monitor written in Go. Detects updates on target URLs and sends notifications via Telegram or other services, ideal for…

crawlerinformation-gatheringweb-security

415 years ago

cariddi

edoardottt/cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

crawlerinformation-gatheringosint+4

3.8k4 days ago

noisy

1tayh/noisy

Simple random DNS, HTTP/S internet traffic noise generator

crawlerdns-analysisprivacy

1.8k8 years ago

gOSINT

nhoya/gosint

OSINT Swiss Army Knife

crawlerdns-subdomain-enumerationemail-harvesting+6

6757 years ago

webpalm

xorbit01/webpalm

Multi-threaded web crawler for structured site mapping and regex-based data extraction. Exports results in JSON, XML, or TXT for reconnaissance and…

crawlerinformation-gatheringosint+2

3821 year ago

endext

sirbugs/endext

Extracts all possible endpoints, URLs, and paths from JavaScript files using customizable regex patterns for web application reconnaissance and API…

crawlerinformation-gatheringreconnaissance+1

2212 years ago

galer

dwisiswant0/galer

A fast tool to fetch URLs from HTML attributes by crawl-in.

crawlerinformation-gatheringutilities-frameworks+1

2641 year ago

evine

saeeddhqan/evine

Interactive CLI Web Crawler

crawlerinformation-gatheringosint+2

1813 months ago

jsfinder

kacakb/jsfinder

Fetches JavaScript files quickly and comprehensively.

crawlerinformation-gatheringreconnaissance+1

1393 years ago

xcrawl3r

hueristiq/xcrawl3r

Recursively spider webpages to discover all URLs by following links, parsing sitemaps, and robots.txt files. Ideal for security reconnaissance and…

crawlerinformation-gatheringpenetration-testing+2

11110 months ago

dj

ejfkdev/dj

Extracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source…

anti-botcrawlerfingerprint-spoofing+7

523 days ago

Previous12 3 Next