Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
85 results
vegadns preview

vegadns

GitLabwattocyber/vegadns

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

dns-analysisdns-subdomain-enumerationinformation-gathering+3
6 days ago
tilt preview
Archived

tilt

GitHubaeondave/tilt

Terminal Ip Lookup Tool

dns-analysisdns-subdomain-enumerationinformation-gathering+4
5612 years ago
theHarvester preview

theHarvester

GitHublaramies/theharvester

E-mails, subdomains and names Harvester - OSINT

dns-analysisdns-subdomain-enumerationemail-harvesting+9
17.2k6h 19m ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.5k17h 55m ago
BigBountyRecon preview

BigBountyRecon

GitHubviralmaniar/bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial…

dns-subdomain-enumerationeducationinformation-gathering+6
1.6k5 years ago
dnsgen preview

dnsgen

GitHubalephnullsk/dnsgen

Generates domain name permutations for subdomain enumeration and recon, supporting custom wordlists, cloud patterns, and fast mode for security…

dns-analysisdns-fuzzingdns-subdomain-enumeration+5
1.1k1 year ago
WireTapper preview

WireTapper

GitHubh9zdev/wiretapper

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

bluetooth-securitydns-subdomain-enumerationembedded-systems-security+9
2.3k4 months ago
reconftw preview

reconftw

GitHubsix2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

cloud-securitydns-analysisdns-subdomain-enumeration+11
8.0k2 months ago
hakrevdns preview

hakrevdns

GitHubhakluke/hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

dns-analysisdns-subdomain-enumerationinformation-gathering+5
1.6k24 days ago
subfinder preview

subfinder

GitHubprojectdiscovery/subfinder

Fast passive subdomain enumeration tool.

dns-analysisdns-fuzzingdns-subdomain-enumeration+9
14.3k1 day ago
CloakQuest3r preview

CloakQuest3r

GitHubspyboy-productions/cloakquest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

cloud-securitydns-analysisdns-subdomain-enumeration+7
2.3k7 months ago
fierce preview

fierce

GitHubmschwager/fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

dns-analysisdns-fuzzingdns-subdomain-enumeration+4
1.8k2 years ago
nodesub preview
Archived

nodesub

GitHubpikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

dns-analysisdns-subdomain-enumerationinformation-gathering+3
1492 years ago
moniorg preview

moniorg

GitHubyousseflahouifi/moniorg

Passive domain monitoring tool leveraging Certificate Transparency logs to discover and track newly issued domains for an organization, with Slack…

dns-subdomain-enumerationinformation-gatheringosint+2
483 years ago
DomainDouche preview
Archived

DomainDouche

GitHubn0kovo/domaindouche

OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.

dns-subdomain-enumerationinformation-gatheringosint+2
263 years ago
knockpy preview

knockpy

GitHubguelfoweb/knockpy

Knock Subdomain Scan

dns-analysisdns-subdomain-enumerationinformation-gathering+4
4.2k6 months ago
CloudFail preview

CloudFail

GitHubm0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

dns-analysisdns-subdomain-enumerationinformation-gathering+5
2.7k2 years ago
ctfr preview

ctfr

GitHubunapibageek/ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

dns-subdomain-enumerationinformation-gatheringosint+1
2.1k6 years ago
Previous12345Next