Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

90 results

CVE-2025-40778

nehkark/cve-2025-40778

Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…

dns-analysiseducationexploitation+3

10 months ago

resolvers

trickest/resolvers

The most exhaustive list of reliable DNS resolvers.

curated-resourcesdns-analysisdns-subdomain-enumeration+6

1.0k6 days ago

ldeep

franc-pentest/ldeep

In-depth ldap enumeration utility

authentication-authorizationconfiguration-auditingdns-analysis+4

60415 days ago

phantomrecon

l33tdawg/phantomrecon

PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered…

dns-analysisexploitationinformation-gathering+6

36 months ago

CF-Hero

musana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

dns-analysisfingerprint-spoofinginformation-gathering+5

2.6k2 months ago

hawk

medpaf/hawk

Network, recon and offensive-security tool for Linux.

dns-analysisdns-subdomain-enumerationinformation-gathering+7

3322 years ago

Massive-Subdomain-Enumerator

jenderal92/massive-subdomain-enumerator

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

dns-analysisdns-subdomain-enumerationinformation-gathering+2

3 months ago

proxychains

haad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1

7.9k2 years ago

sigcorr

sage-s11/sigcorr

SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber…

anomaly-detectiondefensive-toolsdns-analysis+8

16 days ago

zarp

hatriot/zarp

Network Attack Tool

dns-analysisexploitationnetwork-security+5

1.5k4 years ago

IP-reputation-snort-rule-generator

nccgroup/ip-reputation-snort-rule-generator

A tool to generate Snort rules based on public IP reputation data

dns-analysisids-ips-evasionintrusion-detection+2

5613 years ago

PowerExfil

1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

data-exfiltrationdns-analysiseducation+3

966 years ago

cdncheck

projectdiscovery/cdncheck

A utility to detect various technology for a given IP address.

cloud-securitydns-analysisinformation-gathering+3

9894 days ago

cngo

0xsnowmn/cngo

Fast Golang Tool To Get Cname For Domains and Subdomain

dns-analysisinformation-gatheringnetwork-mapping+2

161 year ago

cowitness

stolenusername/cowitness

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an…

dns-analysisinformation-gatheringpenetration-testing+3

1252 years ago

squidmagic

aws-alchemy/squidmagic

analyze a web-based network traffic 🕶 to detect central command and control servers

command-and-controldns-analysisincident-response+3

818 years ago

PY-Log4j-RCE-Scanner

mrharshvardhan/py-log4j-rce-scanner

Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.

dns-analysisexploitationreconnaissance+3

43 years ago

ecs_checker

furkankayapinar/ecs_checker

EDNS Client Subnet (ECS) Remote Detection Tool - CVE-2025-40766

dns-analysisinformation-gatheringnetwork-security+2

11 year ago

Previous12 3 4 5 Next