Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

31 results

FakeDataGen

joelgmsec/fakedatagen

Generates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…

data-exfiltrationinformation-gatheringosint+1

104

1 year ago

gitcolombo

soxoj/gitcolombo

🧬 Extract and analyze contributors info from git repos

code-analysisinformation-gatheringosint

942 months ago

violin

strategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

authentication-authorizationexploitationosint+8

734 days ago

theHarvester

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

dns-subdomain-enumerationemail-harvestinginformation-gathering+6

17.1k9h 59m ago

massdns

blechschmidt/massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

dns-analysisdns-subdomain-enumerationinformation-gathering+2

3.6k4 months ago

domainhunter

threatexpress/domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

command-and-controlinformation-gatheringosint+4

1.7k3 years ago

CrossLinked

m8sec/crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

email-harvestinginformation-gatheringosint+2

1.6k1 year ago

poastal

jakecreps/poastal

Email OSINT tool that resolves names, checks deliverability, detects disposable/spam addresses, and identifies registrations on 10+ social platforms…

email-harvestinginformation-gatheringosint+2

6033 years ago

PowerMeta

dafthack/powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing…

information-gatheringosintreconnaissance

5821 year ago

dcrawl

kgretzky/dcrawl

Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.

crawlerinformation-gatheringosint+1

5469 years ago

fb_friend_list_scraper

n0kovo/fb_friend_list_scraper

OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited.

information-gatheringosintreconnaissance+1

3303 years ago

dorky

codingo/dorky

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

information-gatheringosintreconnaissance

2472 years ago

DGA

andrewaeva/dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…

dns-analysiseducationmachine-learning+4

2269 years ago

twitterBFTD

misterch0c/twitterbftd

Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration

dns-subdomain-enumerationinformation-gatheringosint+1

2209 years ago

linkedin-extension-fingerprinting

mdp/linkedin-extension-fingerprinting

data-exfiltrationfingerprint-spoofinginformation-gathering+4

2156 months ago

TLDHunt

yuyudhn/tldhunt

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

dns-subdomain-enumerationinformation-gatheringosint+2

1861 year ago

osint-suite-tools

quantika14/osint-suite-tools

Repositorio del conjunto de herramientas para hacer OSINT y SOCMINT con Dante's Gates Minimal Version.

educationemail-harvestinginformation-gathering+3

1673 years ago

ATEAM

netspi/ateam

cloud-securitydns-analysisinformation-gathering+5

14911 months ago

Previous12 Next