Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
61 results
xmap preview

xmap

GitHubidealeer/xmap

High-performance network scanner for Internet-wide IPv4/IPv6 research, featuring multi-probe modules (ICMP, TCP SYN, UDP, DNS) and sub-5-minute…

dns-analysisinformation-gatheringnetwork-mapping+3
493
7 months ago
warcannon preview

warcannon

GitHubc6fc/warcannon

High speed/Low cost CommonCrawl RegExp in Node.js

cloud-securitycrawlerdata-exfiltration+3
2562 years ago
RTTM preview

RTTM

GitHubnaveenrudra/rttm

Real Time Threat Monitoring Tool

data-exfiltrationincident-responseinformation-gathering+2
1126 years ago
htbenum preview

htbenum

GitHubsolomonsklash/htbenum

A Linux enumeration script for Hack The Box

exploit-frameworksinformation-gatheringpenetration-testing+2
1936 years ago
android-locdump preview

android-locdump

GitHubpacketlss/android-locdump

android location service cache dumper

android-securitydata-recoverydigital-forensics+4
17913 years ago
paskto preview

paskto

GitHubcloudtracer/paskto

Paskto - Passive Web Scanner

information-gatheringiot-securityosint+2
1487 years ago
unve1ler preview

unve1ler

GitHubspyboy-productions/unve1ler

A social engineering tool designed to seamlessly locate profiles using usernames while offering convenient reverse image search functionality.

information-gatheringosintreconnaissance+1
1642 years ago
ntlmscout preview

ntlmscout

GitHubboydhacks/ntlmscout

Unauthenticated NTLM endpoint reconnaissance tool that decodes Type-2 challenges across HTTP, SMB, MSSQL, SMTP, IMAP, POP3, NNTP, LDAP, and RDP to…

authenticationdns-analysisinformation-gathering+8
5621 days ago
Phishruffus preview

Phishruffus

GitHubjh00nbr/phishruffus

Intelligent threat hunter and phishing servers

dns-analysisinformation-gatheringphishing+2
477 years ago
Neton preview

Neton

GitHubaetsu/neton

Agent-based tool that collects OS, hardware, file, and hook data from internet-connected sandboxes via HTTPS exfiltration, aiding Red Team artifact…

educationinformation-gatheringmalware-analysis+1
993 years ago
IIS-Backdoor preview

IIS-Backdoor

GitHubnu11secur1ty/iis-backdoor

Stealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…

command-and-controlexploitationids-ips-evasion+4
346 years ago
ICMPWatch preview

ICMPWatch

GitHubhalildeniz/icmpwatch

ICMP packet sniffer for capturing, analyzing, and logging Echo Request/Reply packets with filtering, SQLite storage, and PCAP export for network…

information-gatheringnetwork-securitypacket-sniffing-analysis
601 year ago
CVE-2024-4956 preview

CVE-2024-4956

GitHubverylazytech/cve-2024-4956

POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal

exploitationinformation-gatheringpassword-cracking+3
161 year ago
awscanner preview

awscanner

GitHubowasp/awscanner

Finds internet-exposed resources in an AWS account

cloud-infrastructure-securitycloud-securityinformation-gathering+4
192 years ago
phantom-brain preview

phantom-brain

GitHubottoyrocky/phantom-brain

Red portatil de reconocimiento inteligente con IA offline

ai-securityeducationexploitation+9
164 months ago
darkgrid preview

darkgrid

GitHubkaal22/darkgrid

3D threat intelligence dashboard that visualizes malicious infrastructure from OSINT sources like AbuseIPDB and OpenPhish, with a live threat feed,…

dns-analysisinformation-gatheringnetwork-security+4
136 months ago
CVE-2021-27403 preview

CVE-2021-27403

GitHubbokanrb/cve-2021-27403

XSS-Askey

exploitationinformation-gatheringpenetration-testing+3
135 years ago
czds preview

czds

GitHubmsadministrator/czds

A Python package to download Zone Files from the Centralized Zone Data Service hosted by ICAAN.

crawlerdns-analysisinformation-gathering+2
171 year ago
Previous1234Next