Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
333 results
subscraper preview

subscraper

GitHubm8sec/subscraper

Subdomain and target enumeration tool built for offensive security testing

dns-analysisinformation-gatheringosint+3
974
2 years ago
DGA preview

DGA

GitHub360netlab/dga

Suspicious DGA from PDNS and Sandbox.

dns-analysisinformation-gatheringioc-management+3
1894 years ago
Ashok preview

Ashok

GitHubpowerexploit/ashok

Ashok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .

dns-analysisinformation-gatheringosint+4
4454 years ago
reconerator preview

reconerator

GitHubstufus/reconerator

C# Targeted Attack Reconnissance Tools

dns-analysisinformation-gatheringpost-exploitation+2
1205 years ago
Recon preview

Recon

GitHubdirsoooo/recon

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix…

dns-analysisinformation-gatheringosint+6
2224 years ago
mass3 preview

mass3

GitHubsmiegles/mass3

Multi-threaded DNS-based enumeration tool for discovering AWS S3 buckets using pre-compiled wordlists and custom DNS resolvers, with optional Docker…

cloud-securitydns-analysisinformation-gathering+2
1257 years ago
NSE-scripts preview

NSE-scripts

GitHubpsc4re/nse-scripts

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

dns-analysisexploitationinformation-gathering+5
1625 years ago
dns-rebinding-tool preview

dns-rebinding-tool

GitHubh43z/dns-rebinding-tool

dns rebind tool with custom scripts

dns-analysisinformation-gatheringpenetration-testing+1
853 years ago
typodetect preview

typodetect

GitHubtelefonicatc2tech/typodetect

Detects active domain mutations to prevent phishing and smishing. Uses IANA TLDs, blockchain DNS validation, and DoH malware reports. Outputs JSON or…

dns-analysisinformation-gatheringosint+2
755 years ago
BaconSampler preview

BaconSampler

GitHublogisek/baconsampler

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

dns-analysisforensicsinformation-gathering+6
207 months ago
top-dns preview

top-dns

GitHubcorelight/top-dns

Top DNS Measurement for Bro

dns-analysisinformation-gatheringintrusion-detection+2
106 years ago
dns_amplification_scanner preview

dns_amplification_scanner

GitHubpcastagnaro/dns_amplification_scanner

This script checks if each domain from a given domain list is vulnerable to CVE-2006-0987

dns-analysisinformation-gatheringnetwork-security+3
11 year ago
huntglyph preview

huntglyph

GitHubgregory-chatelier/huntglyph

Detect visually similar characters (homoglyphs) and hidden data in text to protect against deceptive attacks

dns-analysisinformation-gatheringosint+3
19 months ago
Onionscan preview

Onionscan

GitLabn3ph0s/onionscan

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

crawlerdns-analysisemail-harvesting+4
4 years ago
dns-honeypot preview
Archived

dns-honeypot

GitHubtg12/dns-honeypot

dns-honeypot

dns-analysisincident-responseinformation-gathering+4
993 months ago
PCAPdroid preview

PCAPdroid

GitHubemanuele-f/pcapdroid

No-root network monitor, firewall and PCAP dumper for Android

android-securitydns-analysiseducation+8
4.7k17h 38m ago
PcapPlusPlus preview

PcapPlusPlus

GitHubseladb/pcapplusplus

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

crawlerdns-analysisforensics+5
3.1k6 days ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns-analysisdns-subdomain-enumerationfuzzing+5
5.7k1 year ago
Previous1…91011…19Next