Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
38 results
crtsh preview

crtsh

GitHubknqyf263/crtsh

API client for crt.sh

osintreconnaissancesubdomain-enumeration
415 years ago
changedetection.io preview

changedetection.io

GitHubdgtlmoon/changedetection.io

Best and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price…

crawlerinformation-gatheringosint+2
34.5k3 days ago
startpage-parser preview

startpage-parser

GitHubmindpatch/startpage-parser

parsing search results from startpage search engine (based on google.com results)

crawlergeneral-purpose-utilitiesinformation-gathering+2
175 years ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns-analysisdns-subdomain-enumerationfuzzing+5
5.7k1 year ago
K2-CLI preview

K2-CLI

GitHubodinglyn0/k2-cli

Putting the analysis in steganalysis.

anomaly-detectionctfdigital-forensics+7
128 months ago
CVE-2024-31320- preview

CVE-2024-31320-

GitHubspiralbl0ck/cve-2024-31320-

Get GeoLocation of Exploited Device using CVE-2024-31320& bluetooth

bluetooth-securityexploitationinformation-gathering+3
1 year ago
shellshock_crawler preview

shellshock_crawler

GitHub352926/shellshock_crawler

Using google to scan sites for "ShellShock" (CVE-2014-6271)

exploitationinformation-gatheringosint+3
12 years ago
disclo preview

disclo

GitHubchaelsoo/disclo

Contact Search Engine

crawlerdns-analysisemail-harvesting+6
24 months ago
IntelOwl preview

IntelOwl

GitHubintelowlproject/intelowl

Scalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…

curated-resourcesdigital-forensicsdynamic-analysis-sandboxing+14
4.7k22 days ago
IPGeoLocation preview

IPGeoLocation

GitHubmaldevel/ipgeolocation

Retrieve IP Geolocation information

information-gatheringosintreconnaissance
9879 years ago
GetDataReport preview

GetDataReport

GitHubpowerscript/getdatareport

Get information client with getdatareport (Plugin)

information-gatheringosintweb-security
259 years ago
python-pentesting preview

python-pentesting

GitHubustayready/python-pentesting

Just a repo of random Python scripts to get pentesters started with the Python language on engagements.

cloud-securitycommand-and-controleducation+6
2196 years ago
LeakManager preview

LeakManager

GitHubmthbernardes/leakmanager

A tool to help you manage your leaks

data-exfiltrationinformation-gatheringosint+1
358 years ago
Cr3dOv3r preview

Cr3dOv3r

GitHubd4vinci/cr3dov3r

Know the dangers of credential reuse attacks.

information-gatheringosintpassword-attacks+1
2.1k9 months ago
Crips preview

Crips

GitHubmanisso/crips

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

dns-analysisinformation-gatheringnetwork-mapping+2
5008 years ago
twebit preview

twebit

GitHubomergunal/twebit

Bitcoin analysis with machine learning

cryptographymachine-learningosint
198 years ago
ctfr preview

ctfr

GitHubunapibageek/ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

dns-subdomain-enumerationinformation-gatheringosint+1
2.1k6 years ago
harpoon preview

harpoon

GitHubte-k/harpoon

CLI tool for open source and threat intelligence

dns-analysisemail-harvestinginformation-gathering+5
1.3k4 months ago
Previous123Next