Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
cowitness preview

cowitness

GitHubstolenusername/cowitness

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an…

dns-analysisinformation-gatheringpenetration-testing+3
125
2 years ago
SpoofcheckSelfTest preview

SpoofcheckSelfTest

GitHubbishopfox/spoofcheckselftest

Web application that lets you test if your domain is vulnerable to email spoofing

configuration-auditingdns-analysisemail-security+1
447 years ago
waf-checker preview

waf-checker

GitHubpapamica/waf-checker

Tests your WAF with +160 payloads

api-security-testingdns-analysisids-ips-evasion+8
5535 months ago
rbndr preview

rbndr

GitHubtaviso/rbndr

Simple DNS Rebinding Service

dns-analysispenetration-testingvulnerability-analysis+1
7568 years ago
CVE-2026-50980 preview

CVE-2026-50980

GitHubbugresearch/cve-2026-50980

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

dns-analysisexploitationvulnerability-analysis+2
1 month ago
Olyx preview

Olyx

GitLabshacode/olyx

🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…

android-securityapi-securitydns-analysis+7
6 months ago
CryptoLyzer preview

CryptoLyzer

GitLabcoroner/cryptolyzer

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

configuration-auditingcryptographydns-analysis+3
2811 days ago
preflight preview

preflight

GitHubpreflightsh/preflight

Go-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…

code-analysisconfiguration-auditingdevsecops+8
583 days ago
Multi-VLAN-Enterprise-Network-Security-Infrastructure preview

Multi-VLAN-Enterprise-Network-Security-Infrastructure

GitHubklairmanraj/multi-vlan-enterprise-network-security-infrastructure

Multi-VLAN virtual network across 10 VMs: GRE tunneling, nftables firewall, Active Directory, BIND9 DNS, Kea DHCP, Docker web services, SMB file…

configuration-auditingdns-analysiseducation+4
4 months ago
Reachability-Check preview

Reachability-Check

GitHubabdullahaligun/reachability-check
configuration-auditingdns-analysisinformation-gathering+3
15 months ago
cve-2020-1350 preview

cve-2020-1350

GitHubgdwnet/cve-2020-1350

A powershell script to deploy the registry mitigation key for CVE-2020-1350

configuration-auditingdns-analysisexploitation+3
6 years ago
ntopng preview

ntopng

GitHubntop/ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

anomaly-detectiondns-analysisintrusion-detection+4
8.1k1 day ago
cyberbro preview

cyberbro

GitHubstanfrbd/cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

defensive-toolsdns-analysiseducation+9
6829 days ago
proxychains preview

proxychains

GitHubhaad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1
7.9k2 years ago
WindowsSpyBlocker preview

WindowsSpyBlocker

GitHubcrazy-max/windowsspyblocker

Block spying and tracking on Windows

defensive-toolsdns-analysisnetwork-security+1
5.2k1 month ago
ByeDPIAndroid preview

ByeDPIAndroid

GitHubdovecoteescapee/byedpiandroid

Android VPN-based local proxy that bypasses Deep Packet Inspection (DPI) and censorship by redirecting all traffic through a SOCKS5 tunnel without…

dns-analysisids-ips-evasionnetwork-security+2
5.5k1 year ago
CVE-2017-9430 preview

CVE-2017-9430

GitHubhomjxi0e/cve-2017-9430
binary-exploitationdns-analysisexploitation+2
9 years ago