Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

53 results

prismsec

azmisyahrul/prismsec

Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting

dns-subdomain-enumerationpenetration-testingpenetration-testing-frameworks+7

5 days ago

loboguara

olivsec/loboguara

Cyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…

data-exfiltrationdns-subdomain-enumerationinformation-gathering+6

731 year ago

httpx

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18

10.3k1 day ago

reconftw

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

cloud-securitydns-analysisdns-subdomain-enumeration+11

8.0k2 months ago

CloakQuest3r

spyboy-productions/cloakquest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

cloud-securitydns-analysisdns-subdomain-enumeration+7

2.3k7 months ago

fierce

mschwager/fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

dns-analysisdns-fuzzingdns-subdomain-enumeration+4

1.8k2 years ago

scan4all

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dns-subdomain-enumerationexploit-frameworksfuzzing+9

6.2k2 years ago

ATSCAN

alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

crawlerdns-subdomain-enumerationemail-harvesting+7

1.6k2 years ago

OSINT-SPY

sharadkumar97/osint-spy

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

cryptographydns-subdomain-enumerationemail-harvesting+5

1.5k6 years ago

SCANNER-INURLBR

mrcl0wnlab/scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

crawlerdns-subdomain-enumerationemail-harvesting+6

2281 year ago

rengine

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

crawlerdns-subdomain-enumerationinformation-gathering+9

8.8k9 months ago

htrace.sh

trimstray/htrace.sh

My simple Swiss Army knife for http/https troubleshooting and profiling.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+3

3.9k1 year ago

Reconnoitre

codingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+4

2.2k6 years ago

Archived

vajra

r3curs1v3-pr0xy/vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

crawlerdns-subdomain-enumerationfuzzing+8

7034 years ago

Archived

pulsar

0x0fb0/pulsar

Network footprint scanner platform. Discover domains and run your custom checks periodically.

cloud-securitydns-subdomain-enumerationinformation-gathering+6

4304 years ago

Scanner-and-Patcher

malwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

dns-subdomain-enumerationeducationexploitation+8

1746 months ago

chomtesh

mr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

dns-subdomain-enumerationinformation-gatheringosint+7

1355 months ago

Complete-google-dorks

nu11secur1ty/complete-google-dorks

Curated collection of Google dork queries for advanced search engine reconnaissance, uncovering exposed databases, configuration files, admin panels,…

database-securitydns-subdomain-enumerationexploitation+7

121 year ago

Previous12 3 Next