Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

26 results

darknet-mcp-server

badchars/darknet-mcp-server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit…

ai-securitydata-exfiltrationinformation-gathering+8

453

3 days ago

voidaccess

katrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

crawlerdata-exfiltrationencryption-decryption-tools+8

7331 month ago

CVE-2026-60206-PoC-Exploit

tc4dy/cve-2026-60206-poc-exploit

👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit…

authentication-authorizationexploitationexploit-frameworks+8

41 month ago

IPGhost

s_r_e_e_r_a_j/ipghost

IPGhost is a strong tool for ethical hackers. This tool automatically changes your IP address , making it hard for anyone to track your online…

information-gatheringosintprivacy+1

13 months ago

darkdump

josh0xa/darkdump

Open Source Intelligence Interface for Deep Web Scraping

data-exfiltrationemail-harvestinginformation-gathering+4

1.8k5 months ago

ipchanger

cappricio-securities/ipchanger

IPChanger is a lightweight command-line tool designed for ethical hackers, security researchers, and privacy enthusiasts. It allows users to…

information-gatheringosintpenetration-testing+2

166 months ago

ache

vida-nyu/ache

Focused web crawler that uses page classifiers and link prioritization to efficiently collect domain-specific or pattern-matching web pages, with…

crawlerinformation-gatheringmachine-learning+1

4871 year ago

Archived

Katana

c4tcom/katana

Python Tool that gives you the ability to run Advanced Google Queries (Known as Google Dorks - Google Dorking)

educationinformation-gatheringosint+3

1.3k1 year ago

Archived

SocialPwned

mrtuxx/socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…

email-harvestinginformation-gatheringosint+5

1.3k1 year ago

Uscrapper

z0m31en7/uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface…

crawlerdata-exfiltrationemail-harvesting+4

7971 year ago

at-doom-fortigate

jpiechowka/at-doom-fortigate

Fortigate CVE-2018-13379 - Tool to search for vulnerable Fortigate hosts in Rapid7 Project Sonar data anonymously through The Tor network.

exploitationinformation-gatheringnetwork-security+3

52 years ago

CloudFail

m0rtem/cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

dns-analysisdns-subdomain-enumerationinformation-gathering+5

2.7k2 years ago

Archived

exitmap

nullhypothesis/exitmap

A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at…

dns-analysisinformation-gatheringnetwork-security+3

4592 years ago

OSIPs

ciprianster/osips

A Python script that gathers all valid IP addresses from all text files from a directory, and checks them against Whois database, TOR relays and…

information-gatheringnetwork-securityosint+1

294 years ago

CVE-2021-46702

exmak-s/cve-2021-46702

Proof-of-concept script that analyzes Windows memory dumps to recover visited Tor onion services, bypassing Tor Browser's anonymity by exploiting…

digital-forensicsexploitationinformation-gathering+2

64 years ago

Onionscan

n3ph0s/onionscan

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

crawlerdns-analysisemail-harvesting+4

4 years ago

getrails

jul10l1r4/getrails

Get trails lib: Get all urls indexed of target

dns-subdomain-enumerationinformation-gatheringosint+1

4 years ago

Archived

pwndb

jxlil/pwndb

Tor-based leaked credential search tool that queries the pwndb2 hidden service to find emails and passwords exposed in data breaches, with wildcard…

data-exfiltrationinformation-gatheringosint+3

55 years ago

Previous12 Next