Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

110 results

CF-Hero

musana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

dns-analysisfingerprint-spoofinginformation-gathering+5

2.6k

1 month ago

SpoofcheckSelfTest

bishopfox/spoofcheckselftest

Web application that lets you test if your domain is vulnerable to email spoofing

configuration-auditingdns-analysisemail-security+1

447 years ago

proxychains

haad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1

7.9k2 years ago

DGA

andrewaeva/dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…

dns-analysiseducationmachine-learning+4

2269 years ago

tinydns

projectdiscovery/tinydns

Tiny embeddable dns server

dns-analysisgeneral-purpose-utilitiesnetwork-security+1

583 months ago

dnschan

rwhitcroft/dnschan

A remote access trojan over DNS

command-and-controldata-exfiltrationdns-analysis+3

9810 years ago

ioc2rpz

homas/ioc2rpz

ioc2rpz is a place where threat intelligence meets DNS.

defensive-toolsdns-analysisdns-fuzzing+6

1161 month ago

cowitness

stolenusername/cowitness

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an…

dns-analysisinformation-gatheringpenetration-testing+3

1252 years ago

meshyface

jaronmcd/meshyface

dns-analysisinformation-gatheringiot-security+4

12416 days ago

CVE-2021-33959

lixiang957/cve-2021-33959

CVE-2021-33959

dns-analysisexploitationnetwork-security+2

13 years ago

log4shell-cloud-scanner

mitiga/log4shell-cloud-scanner

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in…

cloud-infrastructure-securitycloud-securitydns-analysis+3

144 years ago

log4jcheck

northwavesecurity/log4jcheck

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

dns-analysisexploitationinformation-gathering+3

1274 years ago

ecs_checker

furkankayapinar/ecs_checker

EDNS Client Subnet (ECS) Remote Detection Tool - CVE-2025-40766

dns-analysisinformation-gatheringnetwork-security+2

11 year ago

CVE-2025-33073

obscura-cert/cve-2025-33073

authenticationcommand-and-controldns-analysis+7

11 year ago

ipeeyoupeewepee

papayajackal/ipeeyoupeewepee

Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)

dns-analysiseducationexploitation+4

111 year ago

gibson

hackinglz/gibson

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

anomaly-detectioncloud-securitydefensive-tools+6

5 months ago

cupntlm-Automated-Exploit-For-CVE-2025-33073-

egcupcake/cupntlm-automated-exploit-for-cve-2025-33073-

cupntlm

authenticationcommand-and-controldns-analysis+9

34 months ago

BruteShark

odedshimon/bruteshark

Network Analysis Tool

dns-analysisforensicshash-analysis+4

3.4k3 years ago

Previous12 3 4 5 6 7 Next