Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
73 results
Osintgram preview

Osintgram

GitHubdatalux/osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

educationemail-harvestinginformation-gathering+4
14.9k
12 days ago
strix preview

strix

GitHubusestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

ai-securityapi-security-testingcode-analysis+9
67.8k15h 14m ago
trape preview

trape

GitHubjofpin/trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

educationinformation-gatheringosint+3
9.1k5 years ago
007-TheBond preview

007-TheBond

GitHubdeadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

dns-subdomain-enumerationeducationemail-harvesting+5
1.6k16 days ago
IG-Detective preview

IG-Detective

GitHubshredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

educationfingerprint-spoofingforensics+7
1581 month ago
PowerExfil preview

PowerExfil

GitHub1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

data-exfiltrationdns-analysiseducation+3
966 years ago
DakshSCRA preview

DakshSCRA

GitHubcoffeeandsecurity/dakshscra

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…

code-analysisdevsecopseducation+7
4517h 54m ago
velociraptor preview

velociraptor

GitHubvelocidex/velociraptor

Digging Deeper....

data-recoverydefensive-toolsdigital-forensics+8
4.3k1 day ago
LTESniffer preview

LTESniffer

GitHubsyssec-kaist/ltesniffer

An Open-source LTE Downlink/Uplink Eavesdropper

educationinformation-gatheringnetwork-security+5
2.2k1 year ago
BL00DYM4RY preview

BL00DYM4RY

GitLabtoxy4ny/bl00dym4ry

Educational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…

data-exfiltrationeducationinformation-gathering+4
2 months ago
instagram-private-bypass preview

instagram-private-bypass

GitHubjatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…

authentication-authorizationeducationinformation-gathering+3
1868 months ago
I-See-You preview

I-See-You

GitHubviralmaniar/i-see-you

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…

educationinformation-gatheringosint+5
1.2k7 years ago
siem preview

siem

GitHubekitji/siem

Curated SIEM queries and techniques for offensive discovery of Windows privilege escalation, misconfigured ACLs, services, scheduled tasks, and…

curated-resourcesdefensive-toolseducation+7
584 days ago
metta preview

metta

GitHububer-common/metta

An information security preparedness tool to do adversarial simulation.

adversarial-attackdefensive-toolseducation+8
1.1k8 years ago
rayhunter preview

rayhunter

GitHubefforg/rayhunter

Rust tool to detect cell site simulators on an orbic mobile hotspot

defensive-toolseducationembedded-systems-security+9
5.9k1 day ago
Seth preview

Seth

GitHubsyss-research/seth

Perform a MitM attack and extract clear text credentials from RDP connections

authenticationeducationexploitation+4
1.5k10 months ago
open-sesame preview

open-sesame

GitHubhumblelad/open-sesame

A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser.(Addtl. support…

curated-resourceseducationinformation-gathering+1
423 years ago
Awesome-Pentest preview

Awesome-Pentest

GitHubkc57/awesome-pentest

A list of awesome penetration testing tools and resources.

cloud-securitycurated-resourceseducation+9
842 years ago
Previous12345Next