Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

249 results

awesome-lists

mthcht/awesome-lists

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

curated-resourcesdigital-forensicseducation+4

1.9k

3h 58m ago

awesome-osint

jivoi/awesome-osint

😱 A curated list of amazingly awesome OSINT

curated-resourceseducationinformation-gathering+6

28.2k6h 41m ago

Evil-M5Project

7h30th3r0n3/evil-m5project

Multi-purpose WiFi penetration testing toolkit for M5Stack devices. Performs network scanning, evil-twin attacks, deauthentication, captive portal…

bluetooth-securitycommand-and-controleducation+9

2.5k8h 47m ago

awesome-privacy

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

authenticationcurated-resourceseducation+6

9.8k9h 31m ago

OSINT-Cheat-sheet

jieyab89/osint-cheat-sheet

Curated OSINT cheat sheet with tools, datasets, wiki, and tips for reconnaissance, social media intelligence, and red team operations. Includes…

curated-resourceseducationinformation-gathering+3

2.2k1 day ago

Cappriciosec-University

cappricio-securities/cappriciosec-university

A Hacker's E-learning App for Tamil People

api-securityeducationiot-security+6

11 day ago

Reel

trustedsec/reel

educationemail-securitypenetration-testing+4

602 days ago

pmotadeee

pmotadeee/pmotadeee

Bora Jogar?

ctfeducationlabs-practice+3

152 days ago

IG-Detective

shredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

educationfingerprint-spoofingforensics+7

1523 days ago

noapi-google-search-mcp

vincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

anti-botcaptcha-bypasscrawler+8

1224 days ago

querytool

oryon-osint/querytool

Querytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files…

curated-resourceseducationinformation-gathering+3

3186 days ago

sage

gendigitalinc/sage

Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.

ai-securitycode-analysisdefensive-tools+6

2657 days ago

RCE-CVE-2017-0199-detection-analysis

ahmed-tarek22752/rce-cve-2017-0199-detection-analysis

This repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution,…

command-and-controldigital-forensicseducation+8

18 days ago

tryhackme-moniker-link

yfelipecruvinel/tryhackme-moniker-link

Documentation of my hands-on lab Moniker Link (CVE-2024-21413) completed on TryHackMe.

educationemail-securityexploitation+3

9 days ago

Awesome-FOFA

fofainfo/awesome-fofa

The FOFA Library collects usage tips, common scenarios, F&Q, and more for FOFA.

curated-resourceseducationinformation-gathering+3

3509 days ago

EvilFontTool

doctoreww/evilfonttool

A font-based deception tool for red teaming, security research, and whatever else.

adversarial-attackai-securityeducation+3

30610 days ago

Basileak

owasp/basileak

Intentionally vulnerable LLM

ai-securityctfeducation+6

815 days ago

tryhackme-monikerlink-writeup

omarmahmoud1024/tryhackme-monikerlink-writeup

TryHackMe Moniker Link (CVE-2024-21413) walkthrough: Outlook Protected View bypass leading to NTLMv2 hash capture via a crafted moniker link.

ctfeducationexploitation+4

15 days ago

Previous12…14 Next