Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
21 results
evilgrade preview

evilgrade

GitHubinfobyte/evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

dns-analysisexploit-frameworkspayload-generation+4
1.3k
5 years ago
secator preview

secator

GitHubfreelabz/secator

secator - the pentester's swiss knife

dns-analysisexploit-frameworksfuzzing+8
1.3k17h 56m ago
Medusa preview

Medusa

GitHubascotbe/medusa

🐈Medusa是一个红队武器库平台,目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能,持续开发中

dns-analysisexploit-frameworkspayload-generation+4
2.2k3 years ago
POC-S preview

POC-S

GitHubjiangsir404/poc-s

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞, 对功能进行强化以及脚本进行分类添加,自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

dns-analysisexploit-frameworksfuzzing+5
3556 years ago
ipv6tools preview

ipv6tools

GitHubapg-intel/ipv6tools

IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.

dns-analysisexploitationnetwork-mapping+3
1268 years ago
MITMf preview
Archived

MITMf

GitHubbyt3bl33d3r/mitmf

Framework for Man-In-The-Middle attacks

authenticationcommand-and-controldns-analysis+8
3.6k8 years ago
vulnx preview

vulnx

GitHubanouarbensaad/vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform…

crawlerdns-analysisexploit-frameworks+5
2.1k4 years ago
CVE-2016-2776 preview

CVE-2016-2776

GitHubinfobyte/cve-2016-2776

CVE-2016-2776

dns-analysisexploitationexploit-frameworks+2
279 years ago
DoHC2 preview
Archived

DoHC2

GitHubspiderlabs/dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS…

command-and-controldns-analysisexploit-frameworks+3
4506 years ago
ivre preview

ivre

GitHubivre/ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…

dns-analysisinformation-gatheringnetwork-mapping+4
4.1k7 days ago
SharpShooter preview

SharpShooter

GitHubmdsecactivebreach/sharpshooter

Payload Generation Framework

command-and-controldns-analysisexploitation+9
2.0k2 years ago
singularity preview

singularity

GitHubnccgroup/singularity

A DNS rebinding attack framework.

dns-analysisexploitationinformation-gathering+6
1.3k1 month ago
dref preview

dref

GitHubreverseclabs/dref

DNS Rebinding Exploitation Framework

dns-analysisexploitationiot-security+3
4945 years ago
cygor preview

cygor

GitHubtjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7
882 months ago
fracture preview

fracture

GitHubelvira-alec/fracture

FragAttacks WiFi penetration framework — CVE-2020-24586/87/88

dns-analysisexploitationinformation-gathering+7
35 months ago
Prober preview

Prober

GitLabisnic/prober

Automated, reproducible network security testing framework using Ansible and BATS to verify DNS, host availability, open ports, and TLS configuration…

configuration-auditingdns-analysisnetwork-security+3
15 years ago
KUMO-Domain-Recon-Tool preview

KUMO-Domain-Recon-Tool

GitHubkarim852/kumo-domain-recon-tool

Domain OSINT and security reconnaissance framework running 26 parallel modules for DNS, ports, subdomains, leaked credentials, exposed endpoints,…

dns-analysisinformation-gatheringosint+8
396 days ago
0xsp-Mongoose preview
Archived

0xsp-Mongoose

GitHubzux0x3a/0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

command-and-controldns-analysisexploitation+8
5344 years ago
Previous12Next