Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
53 results
htrace.sh preview

htrace.sh

GitHubtrimstray/htrace.sh

My simple Swiss Army knife for http/https troubleshooting and profiling.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+3
3.9k
1 year ago
sandmap preview

sandmap

GitHubtrimstray/sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
1.9k1 year ago
OSINT-SPY preview

OSINT-SPY

GitHubsharadkumar97/osint-spy

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

cryptographydns-subdomain-enumerationemail-harvesting+5
1.5k6 years ago
Cerberus preview

Cerberus

GitHubyagamiilight/cerberus

一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全…

dns-subdomain-enumerationinformation-gatheringpenetration-testing+6
6446 years ago
Vanquish preview

Vanquish

GitHubfrizb/vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active…

dns-subdomain-enumerationexploitationinformation-gathering+8
5168 years ago
Reconator preview

Reconator

GitHubgokulapap/reconator

Automated Recon for Pentesting & Bug Bounty

dns-subdomain-enumerationfuzzinginformation-gathering+6
4413 days ago
fierce-domain-scanner preview

fierce-domain-scanner

GitHubdavidpepper/fierce-domain-scanner

Fierce.pl Domain Scanner

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+1
3049 years ago
Bountystrike-sh preview

Bountystrike-sh

GitHubbountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2913 years ago
dump preview

dump

GitHubs0md3v/dump

Stuff that doesn't deserves its own repository.

dns-subdomain-enumerationinformation-gatheringosint+6
3601 year ago
project-black preview

project-black

GitHubc0rv4x/project-black

Pentest/BugBounty progress control with scanning modules

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2796 years ago
LHF preview

LHF

GitHubblindfuzzy/lhf

A modular recon tool for pentesting

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+4
2769 years ago
attack-surface-framework preview

attack-surface-framework

GitHubvmware-labs/attack-surface-framework

Tool to discover external and internal network attack surface

dns-subdomain-enumerationexploitationinformation-gathering+8
2062 years ago
kanha preview

kanha

GitHubpwnwriter/kanha

🦚 A web-app pentesting suite written in rust .

dns-subdomain-enumerationfuzzinginformation-gathering+5
3241 year ago
chomtesh preview

chomtesh

GitHubmr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

dns-subdomain-enumerationinformation-gatheringosint+7
1355 months ago
loboguara preview

loboguara

GitHubolivsec/loboguara

Cyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…

data-exfiltrationdns-subdomain-enumerationinformation-gathering+6
731 year ago
urlbrute preview

urlbrute

GitHubreddyyz/urlbrute

Directory/Subdomain scanner developed in GoLang.

dns-subdomain-enumerationinformation-gatheringvulnerability-scanners+1
485 years ago
AutoSQLi preview
Archived

AutoSQLi

GitHubclouedoc/autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

dns-subdomain-enumerationosintpenetration-testing+3
2715 years ago
Previous123Next