Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
333 results
urlcrazy preview

urlcrazy

GitHuburbanadventurer/urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

dns-analysisinformation-gatheringosint+2
692
1 year ago
CloudUnflare preview

CloudUnflare

GitHubgreycatz/cloudunflare

Reconnaissance Real IP address for Cloudflare Bypass

cloud-securitydns-analysisinformation-gathering+2
3696 years ago
PRISM-AP preview

PRISM-AP

GitHub1n3/prism-ap

An automated Wireless RogueAP MITM attack framework.

dns-analysisinformation-gatheringpacket-sniffing-analysis+6
1927 years ago
Lepus preview

Lepus

GitHubgfek/lepus

Subdomain finder

dns-analysisinformation-gatheringnetwork-mapping+5
3723 years ago
dnsmorph preview

dnsmorph

GitHubedoardogerosa/dnsmorph

Domain name permutation engine written in Go

dns-analysisinformation-gatheringosint+3
2683 years ago
revsuit preview

revsuit

GitHubli4n0/revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

dns-analysisexploitationinformation-gathering+5
5623 years ago
FalconGate preview

FalconGate

GitHuba3sal0n/falcongate

A smart gateway to stop cyber criminals - Sponsored by Falcon Guard

defensive-toolsdns-analysisintrusion-detection+5
2554 years ago
s3enum preview

s3enum

GitHubkoenrh/s3enum

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

cloud-securitydns-analysisinformation-gathering+2
2802 months ago
dataviz preview

dataviz

GitHubopendns/dataviz

OpenDNS Data Visualization Framework

dns-analysisinformation-gatheringnetwork-security+1
26510 years ago
tabi preview

tabi

GitHubanssi-fr/tabi

BGP Hijack Detection

dns-analysisinformation-gatheringnetwork-security+2
1178 years ago
zannotate preview

zannotate

GitHubzmap/zannotate

Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)

dns-analysisinformation-gatheringnetwork-mapping+3
12316h 36m ago
proteus preview

proteus

GitHubpry0cc/proteus

A projectdiscovery driven attack surface monitoring bot powered by axiom

dns-analysisinformation-gatheringreconnaissance+3
1904 years ago
edge preview

edge

GitHubiknowjason/edge

Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

cloud-securitydns-analysisinformation-gathering+4
18811 months ago
gopassivedns preview

gopassivedns

GitHubphillipmartin/gopassivedns

Network-based passive DNS logger capturing and logging DNS queries from live traffic or pcap files, outputting JSON for integration with SIEM and…

dns-analysisinformation-gatheringnetwork-security+2
1266 months ago
ktr preview

ktr

GitHubhackclub/ktr

Kog traceroute. Highly asynchronous traceroute program written in Rust with ASN WHOIS and PeeringDB lookups.

dns-analysisinformation-gatheringnetwork-mapping+3
17510 months ago
WEBFANG preview

WEBFANG

GitHubtalyx66/webfang

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…

crawlerdns-analysisinformation-gathering+6
1182 months ago
s3dns preview

s3dns

GitHubolizimmermann/s3dns

Passive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…

cloud-securitydns-analysisinformation-gathering+5
1281 day ago
mxmap preview

mxmap

GitHubdavidhuser/mxmap

Automated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…

dns-analysisemail-securityinformation-gathering+3
12121 days ago
Previous1…151617…19Next