Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

118 results

king-phisher

crimsonforge-io/king-phisher

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

phishing-toolsimpersonation-toolsphishing+4

2.6k

5 months ago

osint_toolkit

dev-lu/osint_toolkit

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

ioc-managementosintvulnerability-analysis+6

9335 months ago

flanker

mailgun/flanker

Python email address and Mime parsing library

general-purpose-utilitiesscripting-automationutilities-frameworks+1

1.6k6 months ago

ics-phishing-toolkit

sublime-security/ics-phishing-toolkit

Open source tooling to stop ICS phishing (malicious calendar invites)

phishingcloud-securityincident-response+2

187 months ago

decode-spam-headers

mgeeky/decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

phishing-toolsinformation-gatheringred-teaming+2

6988 months ago

AzureADEnumeration

logisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

cloud-infrastructure-securityosintreconnaissance+6

798 months ago

crime-mapper

mr-r3b00t/crime-mapper

A tool for mapping cyber crime

osintphishing-toolsinformation-gathering+3

2418 months ago

Loki

neo23x0/loki

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

disk-forensicsioc-managementvulnerability-scanners+11

3.8k9 months ago

Tangled

ineesdv/tangled

Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.

phishing-toolslateral-movementphishing+5

27410 months ago

python-inquestlabs

inquest/python-inquestlabs

A Pythonic interface and command line tool for interacting with the InQuest Labs API.

ioc-managementosinthash-analysis+4

3611 months ago

asf__james-project_CVE-2022-22931_3-6-0

shoucheng3/asf__james-project_cve-2022-22931_3-6-0

Modular Java mail server supporting IMAP, SMTP, POP3, and JMAP with Docker deployment, distributed architecture, and CLI management for secure…

container-securityencryption-decryption-toolsconfiguration-auditing+5

1 year ago

detections

delivr-to/detections

A home for detection content developed by the delivr.to team

phishingmalware-analysisthreat-intelligence+2

751 year ago

smtp_userenum

h3x0v3rl0rd/smtp_userenum

Python script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.

osintreconnaissancevulnerability-analysis+4

1 year ago

Evilginx-Phishing-Infra-Setup

an0nud4y/evilginx-phishing-infra-setup

Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs

phishing-toolsids-ips-evasionphishing+6

5981 year ago

PasteMonitor

pixelbubble/pastemonitor

Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match.

osintinformation-gatheringthreat-intelligence+1

511 year ago

flyphish

virtualsamuraii/flyphish

Deploy a phishing infrastructure on the fly.

cloud-infrastructure-securityphishing-toolsphishing+3

801 year ago

IP-Biter

damianofalcioni/ip-biter

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

osintphishing-toolsinformation-gathering+1

3252 years ago

ThePhish

emalderson/thephish

ThePhish: an automated phishing email analysis tool

ioc-managementphishing-toolsphishing+5

1.4k2 years ago

Previous 1 2 345 6 7 Next