Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

228 results

Kunyu

knownsec/kunyu

Cyberspace asset discovery and reconnaissance tool integrating ZoomEye and Seebug APIs for corporate asset collection, subdomain enumeration, SSL…

information-gatheringnetwork-mappingosint+5

1.1k

1 year ago

ShodanX

revoltsecurities/shodanx

Terminal-based reconnaissance and OSINT tool leveraging Shodan API for passive discovery of exposed infrastructure, subdomains, SSL certificates,…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+5

5921 year ago

CloudRecon

g0ldencybersec/cloudrecon

Suite of tools for red teamers and bug hunters to discover ephemeral cloud assets by scanning IP ranges and inspecting SSL certificates for hidden…

cloud-securityinformation-gatheringnetwork-mapping+2

5322 years ago

awsScrape

jhaddix/awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

information-gatheringnetwork-mappingnetwork-security+2

2362 years ago

Nmap-scripts

raikia/nmap-scripts

Nmap NSE script for automated HTTP/HTTPS screenshot capture across multiple ports, supporting JavaScript execution and SSL certificate hostname…

information-gatheringnetwork-mappingpenetration-testing+1

2410 years ago

sslScrape

cheetz/sslscrape

Retrieves SSL/TLS certificates from hosts in a CIDR range and extracts embedded hostnames for network discovery and attack surface mapping.

information-gatheringnetwork-mappingreconnaissance+1

3405 years ago

Reconnoitre

codingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+4

2.2k6 years ago

bscan

welchbj/bscan

an asynchronous target enumeration tool

ctfinformation-gatheringnetwork-mapping+4

2517 years ago

autoenum

gr1mmie/autoenum

Automated service enumeration tool that runs parallel nmap scans, detects services, and launches targeted enumeration tools (nikto, gobuster,…

ctfinformation-gatheringnetwork-mapping+4

2303 years ago

rapiddns

nullt3r/rapiddns

Python CLI and module for fast subdomain enumeration and IP-to-domain lookups using rapiddns.io's 3+ billion DNS resolution database.

dns-analysisdns-subdomain-enumerationinformation-gathering+3

864 years ago

Archived

celerystalk

sethsec/celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

crawlerdns-subdomain-enumerationinformation-gathering+8

4005 years ago

amass

owasp-amass/amass

In-depth attack surface mapping and asset discovery

data-exfiltrationdns-analysisdns-fuzzing+10

15.0k4 months ago

intelspy

maldevel/intelspy

Perform automated network reconnaissance scans

information-gatheringnetwork-mappingpenetration-testing+3

2373 years ago

recon

knowledge-wisdom-understanding/recon

Enumerate a target Based off of Nmap Results

ctfdns-analysisdns-subdomain-enumeration+9

762 years ago

autodeauth

drew-alleman/autodeauth

Automated Linux service that collects information on local Wi-Fi networks and performs deauthentication attacks.

information-gatheringnetwork-mappingwi-fi-auditing+1

683 years ago

chaos

r57-labs/chaos

Origin IP scanning utility developed with ChatGPT

information-gatheringnetwork-mappingpenetration-testing+2

703 years ago

ps.sh

enenumxela/ps.sh

A bash script that automates port scanning on specified target host(s). The aim of the scripts is reducing scan time, increasing scan efficiency and…

network-mappingpenetration-testingport-scanning+2

123 months ago

Archived

jfscan

nullt3r/jfscan

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to…

information-gatheringnetwork-mappingpenetration-testing+3

6706 months ago

Previous12…13 Next