Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
PRISM-AP preview

PRISM-AP

GitHub1n3/prism-ap

An automated Wireless RogueAP MITM attack framework.

dns-analysisinformation-gatheringpacket-sniffing-analysis+6
1927 years ago
findcdn preview

findcdn

GitHubcisagov/findcdn

Scans domains to identify which Content Delivery Network (CDN) they use by fingerprinting HTTPS headers, CNAME records, and WHOIS data, with JSON…

dns-analysisfingerprint-spoofinginformation-gathering+4
1232 months ago
DNSWatch preview

DNSWatch

GitHubhalildeniz/dnswatch

DNS traffic sniffer and analyzer for monitoring, filtering, and detecting anomalies in DNS queries. Features include PCAP export, DoH support, and a…

defensive-toolsdns-analysisinformation-gathering+2
2171 year ago
typodetect preview

typodetect

GitHubtelefonicatc2tech/typodetect

Detects active domain mutations to prevent phishing and smishing. Uses IANA TLDs, blockchain DNS validation, and DoH malware reports. Outputs JSON or…

dns-analysisinformation-gatheringosint+2
755 years ago
eavesarp preview

eavesarp

GitHubimpostorkeanu/eavesarp

Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)

dns-analysisinformation-gatheringnetwork-security+2
704 years ago
pDNS2 preview

pDNS2

GitHubbez0r/pdns2

Passive DNS V2

dns-analysisinformation-gatheringthreat-intelligence
5912 years ago
Phishruffus preview

Phishruffus

GitHubjh00nbr/phishruffus

Intelligent threat hunter and phishing servers

dns-analysisinformation-gatheringphishing+2
477 years ago
VindicateTool preview

VindicateTool

GitHubrushyo/vindicatetool

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

defensive-toolsdns-analysisincident-response+4
614 years ago
pentesting-multitool preview

pentesting-multitool

GitHubffmancera/pentesting-multitool

Different utility scripts for pentesting and hacking.

dns-analysisfuzzinginformation-gathering+4
478 years ago
dns-zone-audit preview

dns-zone-audit

GitHubsleepthegod/dns-zone-audit

This Bash script checks domains for DNS zone transfer misconfigurations (CVE-1999-0532). It queries name servers and attempts AXFR requests; if…

dns-analysisinformation-gatheringmisconfiguration+3
16 months ago
cloud-buster preview
Archived

cloud-buster

GitHubsagehack/cloud-buster

A Cloudflare resolver that works

dns-analysisinformation-gatheringmisconfiguration+5
1457 years ago
Cloudmare preview
Archived

Cloudmare

GitHubmrh0wl/cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

dns-analysisinformation-gatheringpenetration-testing+3
1.8k3 years ago
PY-Log4j-RCE-Scanner preview

PY-Log4j-RCE-Scanner

GitHubmrharshvardhan/py-log4j-rce-scanner

Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.

dns-analysisexploitationreconnaissance+3
43 years ago
sub404 preview
Archived

sub404

GitHubr3curs1v3-pr0xy/sub404

A python tool to check subdomain takeover vulnerability

dns-analysispenetration-testingreconnaissance+3
3543 years ago
Dome preview

Dome

GitHubv4d1/dome

Fast Python-based subdomain enumeration tool combining passive OSINT and active brute-force scanning with DNS wildcard detection, port scanning, and…

dns-analysisosintpenetration-testing+3
5442 years ago
hijagger preview

hijagger

GitHubfirefart/hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

dns-analysisosintreconnaissance+3
3082 days ago
Previous12345Next