Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
63 results
rapidscan preview

rapidscan

GitHubskavngr/rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

dns-analysisinformation-gatheringpenetration-testing+5
2.1k3 years ago
r3con preview

r3con

GitHubthenurhabib/r3con

Multi-functional Web Recon & Vulnerability Scanner Tool

crawlerdns-analysisinformation-gathering+5
354 years ago
inter-recon preview

inter-recon

GitHubinternon/inter-recon

Script to perform automatic initial web and vulnerability recon

dns-analysisfuzzinginformation-gathering+7
85 years ago
nuclei preview

nuclei

GitHubprojectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21
32.4k8h 7m ago
RED_HAWK preview

RED_HAWK

GitHubtuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

crawlerdns-analysisinformation-gathering+5
3.8k6 years ago
dnsbin preview

dnsbin

GitHubettic-team/dnsbin

DNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…

data-exfiltrationdns-analysispenetration-testing+1
2428 years ago
Log4j-RCE-Scanner preview

Log4j-RCE-Scanner

GitHubadilsoybali/log4j-rce-scanner

Remote command execution vulnerability scanner for Log4j.

dns-analysisexploitationvulnerability-scanners+1
2523 years ago
TakeOver-v1 preview

TakeOver-v1

GitHubsamhaxr/takeover-v1

Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover…

dns-analysissubdomain-enumerationvulnerability-analysis+1
1003 years ago
CVE-2021-23017-PoC preview

CVE-2021-23017-PoC

GitHublakshit1212/cve-2021-23017-poc

Proof-of-concept exploit for CVE-2021-23017 targeting a remote host with a custom DNS server. Designed for security testing and vulnerability…

dns-analysisexploitationpenetration-testing+2
13 years ago
EVIL-CVE-2021-23017-Update-2025 preview

EVIL-CVE-2021-23017-Update-2025

GitHub6lj/evil-cve-2021-23017-update-2025

vulnerability in NGINX servers (versions 0.6.18–1.20.0). The scripts aim to cause a Denial of Service (DoS) by sending malicious DNS responses, with…

dns-analysisexploitationpenetration-testing+2
11 year ago
CVE-2021-23017 preview

CVE-2021-23017

GitHubmoften/cve-2021-23017

NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC

dns-analysisexploitationpenetration-testing+2
1 year ago
py-log4shellscanner preview

py-log4shellscanner

GitHubscheibling/py-log4shellscanner

Scanner for the Log4j vulnerability dubbed Log4Shell (CVE-2021-44228)

dns-analysisexploitationfuzzing+3
4 years ago
rbndr preview

rbndr

GitHubtaviso/rbndr

Simple DNS Rebinding Service

dns-analysispenetration-testingvulnerability-analysis+1
7648 years ago
fast-security-scanners preview

fast-security-scanners

GitHubwhitespots/fast-security-scanners

Security checks for your researches

dns-analysismisconfigurationvulnerability-scanners+2
355 years ago
CVE-2026-50980 preview

CVE-2026-50980

GitHubbugresearch/cve-2026-50980

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

dns-analysisexploitationvulnerability-analysis+2
3 months ago
subjack preview

subjack

GitHubhaccer/subjack

Concurrent DNS takeover scanner detecting CNAME, NS, AXFR, SPF, MX, SRV, and stale A record vulnerabilities across cloud providers, with multi-level…

dns-analysispenetration-testingsubdomain-enumeration+2
2.1k9 days ago
log4j-scan preview

log4j-scan

GitHubfullhunt/log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

dns-analysisexploitationvulnerability-scanners+2
3.4k4 years ago
log4j2burpscanner preview

log4j2burpscanner

GitHubf0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2
8393 years ago
Previous1234Next