Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
117 results
Mr.Holmes preview

Mr.Holmes

GitHublucksi/mr.holmes

Modular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…

dns-subdomain-enumerationeducationemail-harvesting+3
4.2k
6 months ago
harpoon preview

harpoon

GitHubte-k/harpoon

CLI tool for open source and threat intelligence

dns-analysisemail-harvestinginformation-gathering+5
1.3k4 months ago
buster preview

buster

GitHubsham00n/buster

An advanced tool for email reconnaissance

email-harvestinginformation-gatheringosint+2
1.4k7 years ago
darkdump preview

darkdump

GitHubjosh0xa/darkdump

Open Source Intelligence Interface for Deep Web Scraping

data-exfiltrationemail-harvestinginformation-gathering+4
1.8k5 months ago
linkedin2username preview

linkedin2username

GitHubinitstring/linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

email-harvestinginformation-gatheringosint+3
1.9k3 months ago
SCANNER-INURLBR preview

SCANNER-INURLBR

GitHubgoogleinurl/scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

email-harvestinginformation-gatheringosint+2
8795 years ago
ScrapedIn preview

ScrapedIn

GitHubdchrastil/scrapedin

A tool to scrape LinkedIn without API restrictions for data reconnaissance

email-harvestinginformation-gatheringosint+2
1.2k2 years ago
JSAnalyzer preview

JSAnalyzer

GitHubjenish-sojitra/jsanalyzer

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.

api-securityemail-harvestinginformation-gathering+4
1.2k7 months ago
socialscan preview

socialscan

GitHubiojw/socialscan

Python library for accurately querying username and email usage on online platforms

email-harvestinginformation-gatheringosint+2
1.8k2 years ago
spyder-osint preview

spyder-osint

GitHubtq17oa7/spyder-osint

Open-source intelligence (OSINT) tool for gathering information from phone numbers, IP addresses, social media, emails, usernames, domains, and…

dns-analysisemail-harvestinginformation-gathering+3
6247 days ago
UhOh365 preview

UhOh365

GitHubraikia/uhoh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled,…

email-harvestinginformation-gatheringosint+2
6075 years ago
GitFive preview

GitFive

GitHubmxrch/gitfive

OSINT tool for investigating GitHub profiles: tracks username/name history, maps emails to accounts, clones repos for analysis, finds secondary…

email-harvestinginformation-gatheringosint+2
1.0k11 months ago
chiasmodon preview

chiasmodon

GitHubchiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

dns-subdomain-enumerationemail-harvestinginformation-gathering+5
6991 year ago
SCANNER-INURLBR preview

SCANNER-INURLBR

GitHubmrcl0wnlab/scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

crawlerdns-subdomain-enumerationemail-harvesting+6
2331 year ago
osint-tools-mcp-server preview

osint-tools-mcp-server

GitHubfrishtik/osint-tools-mcp-server

MCP server exposing multiple OSINT tools for AI assistants like Claude

dns-subdomain-enumerationeducationemail-harvesting+5
2381 year ago
OSINT-Search preview

OSINT-Search

GitHubam0nt31r0/osint-search

Useful for digital forensics investigations or initial black-box pentest footprinting.

digital-forensicsdns-subdomain-enumerationemail-harvesting+5
1557 years ago
censys-enumeration preview

censys-enumeration

GitHub0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

email-harvestinginformation-gatheringosint+2
1563 years ago
ID-entify preview

ID-entify

GitHubbillyv4/id-entify

Search for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.

dns-analysisemail-harvestinginformation-gathering+4
1166 years ago
Previous1234567Next