Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

17 results

dicozorus

synacktiv/dicozorus

A tool to generate and maintain wordlists for Web fuzzing.

curated-resourcesfuzzinginformation-gathering+4

1 month ago

AIP

stratosphereips/aip

The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.

information-gatheringintrusion-detectioniot-security+3

321 year ago

LocalExifGeoMap

lukawe/localexifgeomap

A powerful, privacy-focused, browser-based tool to visualize and analyze GPS data from your photos. Simply drag and drop images to generate…

data-recoveryforensicsgeneral-purpose-utilities+3

16 months ago

wordreaper

nemorous/wordreaper

📜 Scrape targeted wordlists for password cracking using CSS selectors

crawlerctfinformation-gathering+5

514 months ago

NextPass

0xblarky/nextpass

A tool which can be used to generate password list or dictionary from the details of the target

ai-securityinformation-gatheringpassword-attacks+3

65 months ago

lama

tatam/lama

Lama, the application that does not mache these words.

information-gatheringpassword-attackspassword-cracking

237 years ago

otseca

trimstray/otseca

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

configuration-auditinginformation-gatheringpenetration-testing+1

5221 year ago

Metadata-Attacker

rub-nds/metadata-attacker

A tool to generate media files with malicious metadata

information-gatheringpayload-generationpenetration-testing+1

1287 years ago

vthunting

fr0gger/vthunting

Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.

information-gatheringthreat-intelligencevulnerability-analysis

1693 years ago

urlcrazy

urbanadventurer/urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

dns-analysisinformation-gatheringosint+2

6931 year ago

gotator

josue87/gotator

Gotator is a tool to generate DNS wordlists through permutations.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+1

5314 years ago

jarm

salesforce/jarm

Active TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…

information-gatheringnetwork-securityreconnaissance+1

1.3k7 days ago

wordlistgen

ameenmaali/wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

information-gatheringpenetration-testingreconnaissance+1

2426 years ago

xnLinkFinder

xnl-h4ck3r/xnlinkfinder

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

crawlerinformation-gatheringpenetration-testing+3

1.6k5 months ago

IpGeo

z4l4mi/ipgeo

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

information-gatheringnetwork-forensicsosint+1

1323 years ago

Archived

ADFSDump

mandiant/adfsdump

authentication-authorizationidentity-access-managementinformation-gathering+2

3863 years ago

Archived

usernamer

jseidl/usernamer

Pentest Tool to generate usernames/logins based on supplied names.

educationinformation-gatheringpassword-attacks+2

397 years ago