Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

333 results

CloudFail

m0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

dns-analysisdns-subdomain-enumerationinformation-gathering+5

2.7k

2 years ago

web

pi-hole/web

Pi-hole Dashboard for stats and more

dns-analysislog-analysisnetwork-security+1

2.6k2 months ago

massdns

blechschmidt/massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

dns-analysisdns-fuzzingdns-subdomain-enumeration+4

3.6k4 months ago

subbrute

therook/subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

dns-analysisdns-subdomain-enumerationinformation-gathering+2

3.5k9 years ago

SharpShooter

mdsecactivebreach/sharpshooter

Payload Generation Framework

command-and-controldns-analysisexploitation+9

2.0k2 years ago

BruteShark

odedshimon/bruteshark

Network Analysis Tool

dns-analysisforensicshash-analysis+4

3.4k4 years ago

DET

sensepost/det

(extensible) Data Exfiltration Toolkit (DET)

data-exfiltrationdns-analysisencryption-decryption-tools+3

8208 years ago

subjack

haccer/subjack

Concurrent DNS takeover scanner detecting CNAME, NS, AXFR, SPF, MX, SRV, and stale A record vulnerabilities across cloud providers, with multi-level…

dns-analysispenetration-testingsubdomain-enumeration+2

2.1k5 months ago

zarp

hatriot/zarp

Network Attack Tool

dns-analysisexploitationnetwork-security+5

1.5k4 years ago

JudasDNS

mandatoryprogrammer/judasdns

Nameserver DNS poisoning attacks made easy

dns-analysisdns-fuzzingexploitation+2

5279 years ago

godoh

sensepost/godoh

🕳 godoh - A DNS-over-HTTPS C2

command-and-controldns-analysispayload-development+1

8082 years ago

dnsviz

dnsviz/dnsviz

Analyzes DNS delegation and DNSSEC security by probing resolvers and authoritative servers, then validating, diagnosing, and visualizing zone…

configuration-auditingcryptographydns-analysis+2

1.2k1 year ago

holo

holo-routing/holo

Rust-based routing protocol suite implementing BGP, OSPF, IS-IS, RIP, and VRRP with YANG-modeled configuration, gNMI/gRPC automation, and built-in…

configuration-auditingdns-analysisfuzzing+2

5411 day ago

rita

activecm/rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

anomaly-detectioncommand-and-controldns-analysis+4

6372 months ago

StandIn

fuzzysecurity/standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

dns-analysisexploitationlateral-movement+3

8744 years ago

dnsenum

fwaeytens/dnsenum

dnsenum is a perl script that enumerates DNS information

dns-analysisdns-subdomain-enumerationinformation-gathering+2

70311 years ago

log4j2burpscanner

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2

8423 years ago

experiments

commial/experiments

Expriments

binary-analysiscurated-resourcesdebuggers+5

4901 year ago

Previous 1…101112…19 Next