Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
220 results
log4j-urlscanner preview

log4j-urlscanner

GitHubwoahd/log4j-urlscanner

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

dns-analysisexploitationinformation-gathering+3
1
4 years ago
huntglyph preview

huntglyph

GitHubgregory-chatelier/huntglyph

Detect visually similar characters (homoglyphs) and hidden data in text to protect against deceptive attacks

dns-analysisinformation-gatheringosint+3
19 months ago
SR-71 preview

SR-71

GitLabedu0x01/sr-71

An easy-to-use Python tool for performing subdomain enumeration, endpoint recognition, and more

dns-analysisemail-harvestinginformation-gathering+4
16 months ago
log4j preview

log4j

GitHubhassaanahmad813/log4j

Multithreaded Python scanner that detects Log4Shell (CVE-2021-44228) by sending crafted HTTP requests with JNDI payloads and monitoring DNS callbacks…

dns-analysisexploitationinformation-gathering+2
4 years ago
Onionscan preview

Onionscan

GitLabn3ph0s/onionscan

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

crawlerdns-analysisemail-harvesting+4
4 years ago
DNS-resolve-checker preview

DNS-resolve-checker

GitHubnu11secur1ty/dns-resolve-checker

Bash script for DNS resolution checking, enabling quick domain-to-IP lookups and basic network reconnaissance from the command line.

dns-analysisinformation-gatheringnetwork-security+2
3 years ago
dig preview

dig

GitHubxsser/dig

macOS dig wrapper that appends spoofed local TXT records to DNS query output, designed to deceive LLM agents into performing automated penetration…

command-and-controldns-analysisinformation-gathering+3
331 day ago
Responder preview
Archived

Responder

GitHubspiderlabs/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

authenticationdns-analysisexploitation+8
4.9k6 years ago
cloud-buster preview
Archived

cloud-buster

GitHubsagehack/cloud-buster

A Cloudflare resolver that works

dns-analysisinformation-gatheringmisconfiguration+5
1457 years ago
exitmap preview
Archived

exitmap

GitHubnullhypothesis/exitmap

A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at…

dns-analysisinformation-gatheringnetwork-security+3
4592 years ago
golismero preview
Archived

golismero

GitHubgolismero/golismero

GoLismero - The Web Knife

dns-analysisinformation-gatheringpenetration-testing-frameworks+5
8875 years ago
dns-honeypot preview
Archived

dns-honeypot

GitHubtg12/dns-honeypot

dns-honeypot

dns-analysisincident-responseinformation-gathering+4
994 months ago
recon preview
Archived

recon

GitHubpownjs/recon

A powerful target reconnaissance framework powered by graph theory.

dns-analysisinformation-gatheringnetwork-mapping+7
4203 years ago
kenzer preview
Archived

kenzer

GitHubarpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

crawlerdns-analysisinformation-gathering+8
2883 years ago
dnsprobe preview
Archived

dnsprobe

GitHubprojectdiscovery/dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

dns-analysisinformation-gatheringnetwork-mapping+3
2865 years ago
Citadel preview
Archived

Citadel

GitHubredcode-labs/citadel

Collection of pentesting scripts

dns-analysisexploitationinformation-gathering+6
4364 years ago
Cloudmare preview
Archived

Cloudmare

GitHubmrh0wl/cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

dns-analysisinformation-gatheringpenetration-testing+3
1.8k3 years ago
arpy preview
Archived

arpy

GitHubivanvza/arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource

dns-analysisinformation-gatheringnetwork-security+3
2627 years ago
Previous1…10111213Next