Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
1217 results
boa-cve-2009-4496-analysis preview

boa-cve-2009-4496-analysis

GitHubenriquenegri-cyberlaw/boa-cve-2009-4496-analysis

Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.

osintstatic-analysisvulnerability-analysis+3
6 days ago
violin preview

violin

GitHubstrategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

authentication-authorizationosintpenetration-testing-frameworks+8
735 days ago
oopso preview

oopso

GitHubb3rito/oopso

An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines.

osintreconnaissancevulnerability-analysis+2
321 days ago
DeepPass preview

DeepPass

GitHubghostpack/deeppass

Hunting for passwords with deep learning

osintpassword-attacksinformation-gathering+3
2442 years ago
Cheatsheet-God preview

Cheatsheet-God

GitHubolivierlaflamme/cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

osintpassword-attacksexploitation+7
5.6k1 year ago
ThreatIntelligenceDiscordBot preview

ThreatIntelligenceDiscordBot

GitHubvxunderground/threatintelligencediscordbot

Gets updates from various clearnet domains and ransomware threat actor domains

osintthreat-feeds-aggregatorsinformation-gathering+1
4332 years ago
OSINT_Inception-links preview

OSINT_Inception-links

GitHubc3n7ral051nt4g3ncy/osint_inception-links

Current links from the OSINT Inception start-me project

osintreconnaissanceinformation-gathering+3
2133 years ago
LockBit-Tattoo preview

LockBit-Tattoo

GitHub3xp0rt/lockbit-tattoo
osintinformation-gatheringthreat-intelligence+1
322 years ago
wtfis preview

wtfis

GitHubpirxthepilot/wtfis

Passive hostname, domain and IP lookup tool for non-robots

osintreconnaissancethreat-feeds-aggregators+3
1.8k4 months ago
cipher387.github.io preview

cipher387.github.io

GitHubcipher387/cipher387.github.io

Repo for site with links to my projects

osintreconnaissanceinformation-gathering+1
502 years ago
google-dorks preview

google-dorks

GitHubproviesec/google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

osintreconnaissancevulnerability-analysis+5
1.3k27 days ago
EternalLiberty preview

EternalLiberty

GitHubstrangerealintel/eternalliberty
osintinformation-gatheringthreat-intelligence+1
2171 year ago
ClickonceHunter preview

ClickonceHunter

GitHubzyn3rgy/clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

osintreconnaissanceinformation-gathering+1
931 year ago
RansomLook preview

RansomLook

GitHubransomlook/ransomlook

Yet another Ransomware gang tracker

defensive-toolsosintthreat-feeds-aggregators+3
6451 day ago
python-inquestlabs preview

python-inquestlabs

GitHubinquest/python-inquestlabs

A Pythonic interface and command line tool for interacting with the InQuest Labs API.

ioc-managementosinthash-analysis+4
369 months ago
TJ-OSINT-Notebook preview

TJ-OSINT-Notebook

GitHubtjnull/tj-osint-notebook

This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations when it comes to performing…

osintreconnaissanceinformation-gathering+2
3702 years ago
InfraHunter preview

InfraHunter

GitHubmontysecurity/infrahunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

osintphishing-toolsreconnaissance+2
642 years ago
Challenges_2022_Public preview

Challenges_2022_Public

GitHubdownunderctf/challenges_2022_public

Files + Writeups for DownUnderCTF 2022 Challenges

osintreverse-engineeringweb-security+6
2473 years ago
Previous12…68Next