Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
27 results
proxychains preview

proxychains

GitHubhaad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1
7.9k2 years ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns-analysisdns-subdomain-enumerationfuzzing+5
5.7k1 year ago
vulnx preview

vulnx

GitHubanouarbensaad/vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform…

crawlerdns-analysisexploit-frameworks+5
2.1k4 years ago
singularity preview

singularity

GitHubnccgroup/singularity

A DNS rebinding attack framework.

dns-analysisexploitationinformation-gathering+6
1.3k1 month ago
ngrep preview

ngrep

GitHubjpr5/ngrep

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

dns-analysisforensicsinformation-gathering+3
1.0k6 months ago
DET preview

DET

GitHubsensepost/det

(extensible) Data Exfiltration Toolkit (DET)

data-exfiltrationdns-analysisencryption-decryption-tools+3
8208 years ago
domained preview
Archived

domained

GitHubtypeerror/domained

Multi Tool Subdomain Enumeration

dns-analysisdns-subdomain-enumerationinformation-gathering+5
7235 years ago
whonow preview

whonow

GitHubbrannondorsey/whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

dns-analysiseducationpenetration-testing+2
6588 years ago
PacketWhisper preview

PacketWhisper

GitHubtrycatchhcf/packetwhisper

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with…

cryptographydata-exfiltrationdns-analysis+2
6536 years ago
L0p4Map preview

L0p4Map

GitHubhaxl0p4/l0p4map

Professional network monitoring & visualization tool. L0P4Map combines high-speed ARP discovery with full nmap integration and a real-time…

dns-analysisinformation-gatheringnetwork-mapping+6
59725 days ago
dnsmorph preview

dnsmorph

GitHubedoardogerosa/dnsmorph

Domain name permutation engine written in Go

dns-analysisinformation-gatheringosint+3
2663 years ago
DNSWatch preview

DNSWatch

GitHubhalildeniz/dnswatch

DNS traffic sniffer and analyzer for monitoring, filtering, and detecting anomalies in DNS queries. Features include PCAP export, DoH support, and a…

defensive-toolsdns-analysisinformation-gathering+2
2191 year ago
InfoHound preview

InfoHound

GitHubfundacio-i2cat/infohound

InfoHound is an OSINT to extract a large amount of data given a web domain name.

dns-analysiseducationemail-harvesting+8
1632 years ago
ail-typo-squatting preview

ail-typo-squatting

GitHubtyposquatter/ail-typo-squatting

Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.

dns-analysisinformation-gatheringosint+2
1081 year ago
scripts-and-tools preview

scripts-and-tools

GitHubphxbandit/scripts-and-tools

Scripts and utilities to help your hacking needs

dns-analysisexploitationforensics+6
885 months ago
eavesarp preview

eavesarp

GitHubimpostorkeanu/eavesarp

Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)

dns-analysisinformation-gatheringnetwork-security+2
684 years ago
VindicateTool preview

VindicateTool

GitHubrushyo/vindicatetool

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

defensive-toolsdns-analysisincident-response+4
614 years ago
Cloudcheck preview

Cloudcheck

GitHubank1036official/cloudcheck

Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.

cloud-securitydns-analysisinformation-gathering+2
485 years ago
Previous12Next