Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1383 results
hackingtool preview

hackingtool

GitHubz4nzu/hackingtool

All-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…

cloud-securityexploitationforensics+9
79.3k
14 days ago
CVE-2018-7600 preview

CVE-2018-7600

GitHubsl4cky/cve-2018-7600

Testing and exploitation tool for Drupalgeddon 2 (CVE-2018-7600)

exploitationinformation-gatheringpenetration-testing+2
48 years ago
JWTXposer preview

JWTXposer

GitHubchaudharyarjun/jwtxposer

An advanced JWT extraction & decoding tool for bug bounty hunters! 🏴‍☠️

information-gatheringosintreconnaissance+1
461 year ago
STEWS preview

STEWS

GitHubpalindromelabs/stews

A Security Tool for Enumerating WebSockets

information-gatheringpenetration-testingvulnerability-scanners+1
3794 years ago
EasY_HaCk preview

EasY_HaCk

GitHubsabri-zaki/easy_hack

Hack the World using Termux

exploit-frameworksinformation-gatheringnetwork-mapping+4
2.5k1 year ago
spyder-osint preview

spyder-osint

GitHubtq17oa7/spyder-osint

Open-source intelligence (OSINT) tool for gathering information from phone numbers, IP addresses, social media, emails, usernames, domains, and…

dns-analysisemail-harvestinginformation-gathering+3
62417 days ago
pagesource preview

pagesource

GitHubtimf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3
3588 months ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.5k1 day ago
PhoneSploit-Pro preview

PhoneSploit-Pro

GitHubazeemidrisi/phonesploit-pro

An all-in-one hacking tool to remotely take over Android devices.

android-securitycommand-and-controldata-exfiltration+7
6.2k3 days ago
ipsourcebypass preview

ipsourcebypass

GitHubp0dalirius/ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

information-gatheringpenetration-testingvulnerability-analysis+1
40611 months ago
VTScanner preview

VTScanner

GitHubsamhaxr/vtscanner

A comprehensive Python-based security tool for file scanning, malware detection, and analysis in an ever-evolving cyber landscape.

hash-analysisinformation-gatheringmalware-analysis+1
1122 years ago
subfinder preview

subfinder

GitHubprojectdiscovery/subfinder

Fast passive subdomain enumeration tool.

dns-analysisdns-fuzzingdns-subdomain-enumeration+9
14.4k6 days ago
cloudfox preview

cloudfox

GitHubbishopfox/cloudfox

Automating situational awareness for cloud penetration tests.

cloud-infrastructure-securitycloud-securityexploitation+7
2.6k16 days ago
I-See-You preview

I-See-You

GitHubviralmaniar/i-see-you

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…

educationinformation-gatheringosint+5
1.2k7 years ago
CVE-2024-11318 preview

CVE-2024-11318

GitHubxthalach/cve-2024-11318

This repository details an IDOR vulnerability in AbsysNet 2.3.1, which allows a remote attacker to brute-force session IDs via the /cgi-bin/ocap/…

authentication-authorizationexploitationinformation-gathering+3
11 year ago
tinfoleak preview

tinfoleak

GitHubvaguileradiaz/tinfoleak

The most complete open-source tool for Twitter intelligence analysis

information-gatheringosintreconnaissance+1
2.0k8 years ago
AngryOxide preview

AngryOxide

GitHubragnt/angryoxide

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

exploitationinformation-gatheringpacket-sniffing-analysis+5
2.0k11 hours ago
Klyda preview

Klyda

GitHubhcbaker/klyda

Highly configurable script for dictionary/spray attacks against online web applications.

information-gatheringpassword-attackspenetration-testing+1
513 years ago
Previous12…77Next