Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

17 results

my-little-honeypot

pandipanda69/my-little-honeypot

Lightweight telnet honeypot for capturing IoT malware samples and identifying active command-and-control infrastructure, designed for educational…

command-and-controliot-securitymalware-analysis+2

9 years ago

signalops

emrekybs/signalops

All-source intelligence fusion dashboard — WiFi, cellular, CCTV, ADS-B, orbital & SDR feeds unified into a single tactical map. Security research…

ai-securitycrawlerinformation-gathering+8

314 days ago

Data-Shield_IPv4_Blocklist

duggytuxy/data-shield_ipv4_blocklist

Curated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…

defensive-toolsincident-responseinformation-gathering+5

6249h 53m ago

fapro

fofapro/fapro

Multi-protocol honeypot simulator supporting 50+ network services with deep interaction, TCP/UDP/ICMP logging, JA3 fingerprinting, and virtual…

defensive-toolsfingerprint-spoofinginformation-gathering+3

1.6k1 year ago

gopassivedns

phillipmartin/gopassivedns

Network-based passive DNS logger capturing and logging DNS queries from live traffic or pcap files, outputting JSON for integration with SIEM and…

dns-analysisinformation-gatheringnetwork-security+2

1278 months ago

darkgrid

kaal22/darkgrid

3D threat intelligence dashboard that visualizes malicious infrastructure from OSINT sources like AbuseIPDB and OpenPhish, with a live threat feed,…

dns-analysisinformation-gatheringnetwork-security+4

137 months ago

Archived

melody

ma111e/melody

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

information-gatheringintrusion-detectionnetwork-security+5

1391 year ago

C2IntelFeeds

drb-ra/c2intelfeeds

Automatically generated C2 threat intelligence feeds of IPs, domains, URL paths, and implant configuration metadata, derived from internet scanning…

command-and-controldefensive-toolsincident-response+6

74613h 50m ago

conpot

mushorg/conpot

ICS/SCADA honeypot

information-gatheringnetwork-securityscada-ics-security+1

1.5k21h 52m ago

phantomprint

haruu77g/phantomprint

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

digital-forensicsinformation-gatheringnetwork-mapping+7

42 months ago

NetSpecter

s_r_e_e_r_a_j/netspecter

NetSpecter is a lightweight yet powerful asynchronous OSINT and reconnaissance engine built in Python.

dns-analysisinformation-gatheringnetwork-security+4

14 months ago

nipe

htrgouvea/nipe

An engine to make Tor network your default gateway

network-securityosintprivacy+1

2.4k4 months ago

kalitorify

brainfucksec/kalitorify

Transparent proxy through Tor for Kali Linux OS

network-securityosintpenetration-testing+2

1.2k4 years ago

multitor

trimstray/multitor

Create multiple TOR instances with a load-balancing.

network-securityosintpenetration-testing+2

1.2k1 year ago

fastfluxanalysis

staaldraad/fastfluxanalysis

Scripts to detect Fast-Flux and DGA using DNS query responses

dns-analysisnetwork-securityosint+2

459 years ago

qyvora-toha3ee

qyvora/qyvora-toha3ee

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

exploitationnetwork-securityosint+9

58 days ago

cve-2024-21762-checker

rdoix/cve-2024-21762-checker

Shodan-based scanner that discovers FortiGate SSL VPN devices and tests them for CVE-2024-21762 vulnerability, displaying organization and country…

exploitationnetwork-securityosint+3

12 years ago