Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

14 results

Simple Pentesting

sakispat/simple-pentesting

An educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…

educationinformation-gatheringnetwork-mapping+7

17 days ago

hakrevdns

hakluke/hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

dns-analysisdns-subdomain-enumerationinformation-gathering+5

1.6k1 month ago

quicmap

bojanisc/quicmap

quicmap is a simple yet quic (!) QUIC protocol scanner

information-gatheringnetwork-mappingnetwork-security+2

892 years ago

vlan-hopping---frogger

nccgroup/vlan-hopping---frogger

Easy 802.1Q VLAN Hopping

exploitationinformation-gatheringnetwork-mapping+4

38910 years ago

dump1090

malcolmrobb/dump1090

Dump1090 is a simple Mode S decoder for RTLSDR devices

embedded-systems-securityhardware-securityinformation-gathering+3

1.1k11 years ago

dump1090

antirez/dump1090

Dump1090 is a simple Mode S decoder for RTLSDR devices

embedded-systems-securityhardware-iot-securityinformation-gathering+3

2.9k7 months ago

rapiddns

nullt3r/rapiddns

Rapidly enumerate subdomains and domains using rapiddns.io.

dns-analysisdns-subdomain-enumerationinformation-gathering+3

854 years ago

log4jScan

sinakeshmiri/log4jscan

simple python scanner to check if your network is vulnerable to CVE-2021-44228

exploitationnetwork-mappingpenetration-testing+2

44 years ago

CVE-2025-24132-Scanner

feralthedogg/cve-2025-24132-scanner

mDNS-based AirPlay device discovery tool that scans local networks and tests for CVE-2025-24132 zero-click HTTP RCE vulnerability with a simple GUI…

exploitationinformation-gatheringnetwork-mapping+3

31 year ago

geolocation-tool

jimaek/geolocation-tool

Geo locate any IP to a physical location using latency

general-purpose-utilitiesinformation-gatheringnetwork-mapping+2

13529 days ago

OnionHop

center2055/onionhop

Privacy-first Desktop app that routes your traffic through Tor - Anonymous browsing made simple

dns-analysisnetwork-mappingnetwork-security+3

69816h 49m ago

sandmap

trimstray/sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6

1.9k1 year ago

HikPwn

4n4nk3/hikpwn

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8.

exploitationinformation-gatheringiot-security+2

1304 years ago

w12scan

w-digital-scanner/w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

information-gatheringnetwork-mappingosint+3

1.3k6 years ago