Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

91 results

username-anarchy

urbanadventurer/username-anarchy

Username tools for penetration testing

information-gatheringosintpassword-attacks+3

1.5k

1 year ago

WhatsMyName

webbreacher/whatsmyname

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

curated-resourcesemail-harvestinginformation-gathering+4

2.9k1 day ago

Aether

fknmega/aether

AI-driven OSINT and security research agent that builds a live knowledge graph from public data, with bundled recon tools and offensive-security…

ai-securityctfcurated-resources+5

1746 days ago

insightsnexus

cyberintel-labs/insightsnexus

OSINT Graph Investigation Application

curated-resourcesdns-subdomain-enumerationeducation+7

349 months ago

linkedin2username

initstring/linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

email-harvestinginformation-gatheringosint+3

1.9k3 months ago

osint-menace

awesom3alex/osint-menace

Passive OSINT triage console for email, username, domain, IP, and crypto wallet reconnaissance. Features case management, curated resource links, and…

cryptographycurated-resourcesdns-analysis+5

92 months ago

CVE-2026-26744

lorenzobruno7/cve-2026-26744

Demonstrates user enumeration in FormaLMS via response discrepancy on the /lostpwd endpoint, enabling unauthenticated username discovery for targeted…

information-gatheringpenetration-testingreconnaissance+2

6 months ago

cve-2016-20012

arturo-b-cmu/cve-2016-20012

Python script for SSH username enumeration using timing-based analysis to identify valid accounts on a target server.

authenticationinformation-gatheringnetwork-security+3

1 year ago

socialscan

iojw/socialscan

Python library for accurately querying username and email usage on online platforms

email-harvestinginformation-gatheringosint+2

1.8k2 years ago

Emora-Project

idefasoft/emora-project

Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks

information-gatheringosintreconnaissance+1

7197 months ago

blackbird

p1ngul1n0/blackbird

An OSINT tool to search for accounts by username and email in social networks.

email-harvestinginformation-gatheringosint+3

8.2k1 year ago

user-scanner

kaifcodec/user-scanner

Multi-platform OSINT scanner for email and username reconnaissance across 295+ vectors. Extracts profile metadata, checks account registrations, and…

email-harvestinginformation-gatheringosint+2

4.8k1h 41m ago

CVE-2024-54772

deauther890/cve-2024-54772

Python-based exploit for CVE-2024-54772 enabling username enumeration on MikroTik RouterOS versions v6.43 through v7.17.2 using wordlist or…

exploitationinformation-gatheringnetwork-security+3

341 year ago

CVE-2020-14181

rival420/cve-2020-14181

POC For CVE-2020-1481 - Jira Username Enumerator/Validator

exploitationinformation-gatheringosint+3

81 year ago

CVE-2022-23342

initroot/cve-2022-23342

Proof-of-concept for Active Directory username enumeration vulnerability in Hyland OnBase via login endpoint response differences, enabling…

authenticationinformation-gatheringreconnaissance+2

34 years ago

cve-2018-15473

wtbacon/cve-2018-15473

Remote OpenSSH username enumeration exploit for CVE-2018-15473, featuring malformed packet and timing attack scripts with multi-threaded scanning.

exploitationinformation-gatheringnetwork-security+3

5 months ago

CVE-2018-15473

kaktus5454/cve-2018-15473

SSH username enumeration exploit for CVE-2018-15473 (OpenSSH 2.3-7.7). Sends malformed authentication packets to identify valid users on vulnerable…

exploitationinformation-gatheringpenetration-testing+3

5 months ago

CVE-2023-30458

d34dun1c02n/cve-2023-30458

Username enumeration exploit for Medicine Tracker System 1.0 leveraging response timing discrepancies in the login functionality to identify valid…

exploitationinformation-gatheringpenetration-testing+2

3 years ago

Previous12 3 4 5 6 Next