Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
41 results
gods-eye-view preview

gods-eye-view

GitHubbilawalsidhu/gods-eye-view

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

general-purpose-utilitiesinformation-gatheringosint+1
62.7k7h 18m ago
findcdn preview

findcdn

GitHubcisagov/findcdn

Scans domains to identify which Content Delivery Network (CDN) they use by fingerprinting HTTPS headers, CNAME records, and WHOIS data, with JSON…

dns-analysisfingerprint-spoofinginformation-gathering+4
1234 years ago
dddd preview

dddd

GitHubsleepingbag945/dddd

Batch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…

fingerprint-spoofinginformation-gatheringnetwork-mapping+9
1.9k2 years ago
crawlee preview

crawlee

GitHubapify/crawlee

Node.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…

anti-botcrawlerfingerprint-spoofing+6
26.3k8h 15m ago
ThreatLens preview

ThreatLens

GitHubabdaullahag/threatlens

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…

defensive-toolsincident-responseinformation-gathering+7
267 days ago
dj preview

dj

GitHubejfkdev/dj

Extracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source…

anti-botcrawlerfingerprint-spoofing+7
601 month ago
SilentSniffer preview

SilentSniffer

GitHubahmadhassan-bted/silentsniffer

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for…

educationinformation-gatheringosint+7
5.9k13 days ago
Storm-Breaker preview

Storm-Breaker

GitHubultrasecurity/storm-breaker

Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.

information-gatheringosintphishing-tools+2
5.7k3 days ago
mitaka preview

mitaka

GitHubninoseki/mitaka

Browser extension for OSINT search and IoC analysis. Auto-detects and refangs indicators of compromise, then queries 65+ threat intelligence and…

information-gatheringosintthreat-intelligence
1.8k2 months ago
browser-identity-attacks-matrix preview

browser-identity-attacks-matrix

GitHubpushsecurity/browser-identity-attacks-matrix

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they…

curated-resourceseducationidentity-access-management+6
1.4k6 months ago
ExtAnalysis preview

ExtAnalysis

GitHubtuhinshubhra/extanalysis

Browser Extension Analysis Framework - Scan, Analyze Chrome, firefox and Brave extensions for vulnerabilities and intels

information-gatheringosintreconnaissance+2
7508 months ago
SOC-Multitool preview

SOC-Multitool

GitHubzdhenard42/soc-multitool

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

incident-responseinformation-gatheringosint+1
4201 year ago
Awesome-Asset-Discovery preview

Awesome-Asset-Discovery

GitHubredhuntlabs/awesome-asset-discovery

Curated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…

cloud-securitycurated-resourcesemail-harvesting+7
2.9k1 year ago
evilwaf preview

evilwaf

GitHubmatrixleons/evilwaf

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

fingerprint-spoofinginformation-gatheringosint+6
88311 days ago
Osint-Sync preview

Osint-Sync

GitHubmixaoc/osint-sync

Browser extension for OSINT research enabling username, email, and phone number searches across 20+ platforms with integrated access to GHunt,…

email-harvestinginformation-gatheringosint+5
5811 months ago
hindsight preview

hindsight

GitHubryandfir/hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

digital-forensicsforensicsinformation-gathering+1
1.5k4 days ago
crx-scouter preview

crx-scouter

GitHubneargle/crx-scouter

🕵️‍♂️ 🔎 🕸️ I Know U Have Installed These Chrome Extensions Below.

information-gatheringosintweb-security
24 years ago
sniffly preview

sniffly

GitHubdiracdeltas/sniffly

Sniffing browser history using HSTS

information-gatheringosintweb-security
9389 years ago
Previous123Next