Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
97 results
frogy2.0 preview

frogy2.0

GitHubiamthefrogy/frogy2.0

Orbis is an full spectrum automated external attack surface intelligent toolkit.

cloud-securitydns-analysisemail-security+9
4121 month ago
quien preview

quien

GitHubretlehs/quien

A better whois and domain intelligence toolkit

dns-analysisemail-securityinformation-gathering+6
1.3k3 months ago
NtlmRelayToEWS preview

NtlmRelayToEWS

GitHubarno0x/ntlmrelaytoews

ntlm relay attack to Exchange Web Services

email-securityexploitationinformation-gathering+4
3328 years ago
email-header-analyzer preview

email-header-analyzer

GitHubcyberdefenders/email-header-analyzer

E-Mail Header Analyzer

digital-forensicsemail-securityforensics+2
7006 years ago
paperweight preview

paperweight

GitHubwslyvh/paperweight

Paperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source.

data-exfiltrationemail-securityincident-response+5
4581 day ago
TrashEmail preview

TrashEmail

GitHubrosehgal/trashemail

A hosted disposable email telegram bot; Extremely privacy friendly; Proudly hosted for community.

email-securityinformation-gatheringosint+1
5704 years ago
ExchangeRelayX preview

ExchangeRelayX

GitHubquickbreach/exchangerelayx

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

authenticationemail-securityexploitation+7
3048 years ago
SpoofThatMail preview

SpoofThatMail

GitHubv4d1/spoofthatmail

Bash script to check if a domain or list of domains can be spoofed based in DMARC records

dns-analysisemail-securityphishing-tools+1
3364 years ago
msmailprobe preview

msmailprobe

GitHubbusterb/msmailprobe

Enumerate valid users on Office 365 and Exchange via time-based and error-based techniques across multiple exposed services, including OWA,…

email-securityinformation-gatheringosint+2
2048 years ago
p5-ssl-tools preview

p5-ssl-tools

GitHubnoxxi/p5-ssl-tools

Perl scripts for SSL/TLS analysis: check protocol and cipher support, verify certificates, test OCSP, and detect Heartbleed across SMTP, HTTPS, and…

configuration-auditingcryptographyemail-security+3
2014 years ago
SMTPTester preview

SMTPTester

GitHubxfreed0m/smtptester

small python3 tool to check common vulnerabilities in SMTP servers

email-securityinformation-gatheringpenetration-testing+1
1643 years ago
crime-mapper preview

crime-mapper

GitHubmr-r3b00t/crime-mapper

A tool for mapping cyber crime

digital-forensicsemail-securityinformation-gathering+3
2418 months ago
MailRipV2 preview

MailRipV2

GitHubdrpython3/mailripv2

Improved SMTP Checker / SMTP Cracker with proxy-support, inbox test and many more features.

email-securityinformation-gatheringpassword-attacks+1
2144 years ago
IP-Biter preview

IP-Biter

GitHubdamianofalcioni/ip-biter

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

email-securityinformation-gatheringosint+1
3271 year ago
mx-takeover preview

mx-takeover

GitHubmusana/mx-takeover

Scans DNS MX records to detect misconfigured, expiring, or unregistered domains vulnerable to email takeover, with automatic reclamation support for…

dns-analysisemail-securitymisconfiguration+1
3623 years ago
mxmap preview

mxmap

GitHubdavidhuser/mxmap

Automated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…

dns-analysisemail-securityinformation-gathering+3
1211 month ago
OutlookLeakTest preview

OutlookLeakTest

GitHubnccgroup/outlookleaktest

The Outlook HTML Leak Test Project

data-exfiltrationemail-securityinformation-gathering+5
1298 years ago
AADOutsider-py preview

AADOutsider-py

GitHubsynacktiv/aadoutsider-py

Python3 rewrite of AsOutsider features of AADInternals

authenticationcloud-securitydns-analysis+7
6411 days ago
Previous123456Next