Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
gOSINT preview

gOSINT

GitHubnhoya/gosint

OSINT Swiss Army Knife

crawlerdns-subdomain-enumerationemail-harvesting+6
6737 years ago
OSINT-Search preview

OSINT-Search

GitHubam0nt31r0/osint-search

Useful for digital forensics investigations or initial black-box pentest footprinting.

digital-forensicsdns-subdomain-enumerationemail-harvesting+5
1537 years ago
EmBomber preview

EmBomber

GitHubmazenelzanaty/embomber

Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook

email-harvestingpenetration-testingphishing-tools+1
1368 years ago
ID-entify preview

ID-entify

GitHubbillyv4/id-entify

Search for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.

dns-analysisemail-harvestinginformation-gathering+4
1166 years ago
censys-enumeration preview

censys-enumeration

GitHub0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

email-harvestinginformation-gatheringosint+2
1563 years ago
Samurai preview

Samurai

GitHuboffxec/samurai

Bash-based email discovery framework that extracts email addresses using Google dork queries, company names, or domain names for OSINT reconnaissance.

email-harvestinginformation-gatheringosint+1
858 years ago
goCabrito preview

goCabrito

GitHubkingsabri/gocabrito

Super organized and flexible script for sending phishing campaigns

email-harvestingpenetration-testingphishing+3
564 years ago
hermes-osint preview

hermes-osint

GitHubexpert21/hermes-osint

Hermes — an ephemeral, Docker-powered OSINT framework for testing, tinkering, and secure investigative automation.

dns-subdomain-enumerationeducationemail-harvesting+6
437 months ago
LeakedMails preview

LeakedMails

GitHubjosue87/leakedmails

Automated email breach checker using Selenium to query HaveIBeenPwned for leaked credentials, generating CSV reports of compromised accounts.

email-harvestinginformation-gatheringosint
105 years ago
disclo preview

disclo

GitHubchaelsoo/disclo

Contact Search Engine

crawlerdns-analysisemail-harvesting+6
23 months ago
CVE-2023-2982-POC preview

CVE-2023-2982-POC

GitHubh4k6/cve-2023-2982-poc

WordPress社交登录和注册(Discord,Google,Twitter,LinkedIn)<=7.6.4-绕过身份验证

authenticationcrawleremail-harvesting+3
93 years ago
Previous12Next