Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
23 results
rita preview

rita

GitHubactivecm/rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

anomaly-detectioncommand-and-controldns-analysis+4
663
4 months ago
dataviz preview

dataviz

GitHubopendns/dataviz

OpenDNS Data Visualization Framework

dns-analysisinformation-gatheringnetwork-security+1
26611 years ago
Onionscan preview

Onionscan

GitLabn3ph0s/onionscan

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

crawlerdns-analysisemail-harvesting+4
4 years ago
kubeshark preview

kubeshark

GitHubkubeshark/kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…

ai-securitycloud-infrastructure-securitycloud-security+9
12.1k1 day ago
Mistica preview

Mistica

GitHubincidedigital/mistica

An open source swiss army knife for arbitrary communication over application protocols

command-and-controldata-exfiltrationdns-analysis+4
2455 years ago
CloudUnflare preview

CloudUnflare

GitHubgreycatz/cloudunflare

Reconnaissance Real IP address for Cloudflare Bypass

cloud-securitydns-analysisinformation-gathering+2
3716 years ago
EasyEASM preview

EasyEASM

GitHubg0ldencybersec/easyeasm

Zero-dollar attack surface management tool

cloud-securitydns-analysisdns-subdomain-enumeration+7
3352 years ago
Wireshark preview

Wireshark

GitLabwireshark/wireshark

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

dns-analysisforensicsnetwork-forensics+3
1.7k13h 9m ago
zynos-attacker preview

zynos-attacker

GitHubnasroabd/zynos-attacker

ZynOS tool for automated attack on a range of IPs, find more informations at :

dns-analysiseducationexploitation
7412 years ago
TakeOver-v1 preview

TakeOver-v1

GitHubsamhaxr/takeover-v1

Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover…

dns-analysissubdomain-enumerationvulnerability-analysis+1
1003 years ago
PY-Log4j-RCE-Scanner preview

PY-Log4j-RCE-Scanner

GitHubmrharshvardhan/py-log4j-rce-scanner

Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.

dns-analysisexploitationreconnaissance+3
43 years ago
exitmap preview
Archived

exitmap

GitHubnullhypothesis/exitmap

A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at…

dns-analysisinformation-gatheringnetwork-security+3
4593 years ago
DET preview

DET

GitHubsensepost/det

(extensible) Data Exfiltration Toolkit (DET)

data-exfiltrationdns-analysisencryption-decryption-tools+3
8228 years ago
Snitch preview

Snitch

GitHubaixisstudio/snitch

Real-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps…

anomaly-detectiondefensive-toolsdns-analysis+6
4452 days ago
CVE-2026-41096-POC preview

CVE-2026-41096-POC

GitHubsatchfunky/cve-2026-41096-poc

windows api bug

binary-exploitationdns-analysisexploitation+3
395 months ago
inter-recon preview

inter-recon

GitHubinternon/inter-recon

Script to perform automatic initial web and vulnerability recon

dns-analysisfuzzinginformation-gathering+7
85 years ago
sigint-hombre preview

sigint-hombre

GitHubmalvuln/sigint-hombre

Dynamically generated Suricata rules from real-time threat feeds

defensive-toolsdns-analysisintrusion-detection+4
149 months ago
Fourteen_Endpoints preview

Fourteen_Endpoints

GitHubjgoyd/fourteen_endpoints

Shell Companies Inside Apple's Privacy Relay

digital-forensicsdns-analysisforensics+8
56 months ago
Previous12Next