Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
InfraHunter preview

InfraHunter

GitHubmontysecurity/infrahunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

information-gatheringosintphishing-tools+2
64
2 years ago
spaces-finder preview

spaces-finder

GitHubappsecco/spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

cloud-infrastructure-securitycloud-securityinformation-gathering+4
1566 years ago
googlesub preview

googlesub

GitHubzombiesam/googlesub

This script will try to find a domains subdomains by using google dorking. It will never connect to the site it is researching.

dns-analysisdns-subdomain-enumerationinformation-gathering+4
2010 years ago
sherlock preview

sherlock

GitHubsherlock-project/sherlock

Hunt down social media accounts by username across social networks

digital-forensicsemail-harvestingforensics+11
91.1k1 month ago
CVE-2022-40140-SCANNER preview

CVE-2022-40140-SCANNER

GitHubipsbruno/cve-2022-40140-scanner

A Shodan hunter for CVE-2022-40140

exploitationinformation-gatheringosint+2
23 years ago
claudleak preview

claudleak

GitHubhazcod/claudleak

Hunt for AI coding artifacts containing secrets.

cloud-securitycode-analysisinformation-gathering+3
576 months ago
thrunt-god preview

thrunt-god

GitHubbackbay-labs/thrunt-god

Threat hunting command system for agentic IDEs

incident-responseinformation-gatheringintrusion-detection+5
361 month ago
IG-Detective preview

IG-Detective

GitHubshredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

educationfingerprint-spoofingforensics+7
15621 days ago
git-hound preview

git-hound

GitHubtillson/git-hound

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

code-analysisdevsecopsinformation-gathering+4
1.5k9 months ago
Skadi preview

Skadi

GitHuborlikoski/skadi

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

curated-resourcesdigital-forensicsdisk-forensics+9
5193 years ago
WSPIH preview

WSPIH

GitHubjerrychan807/wspih

Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器

information-gatheringosintvulnerability-scanners+1
2147 years ago
MurMurHash preview

MurMurHash

GitHubviralmaniar/murmurhash

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

hash-analysisosintphishing+1
1213 years ago
D4TA-HUNTER preview

D4TA-HUNTER

GitHubmicro-joan/d4ta-hunter

Automated OSINT framework for ethical hacking audits. Collects employee emails, password hashes, subdomains, and IPs via BreachDirectory and…

educationemail-harvestinginformation-gathering+3
1763 years ago
git-wild-hunt preview

git-wild-hunt

GitHubjosehelps/git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

code-analysisinformation-gatheringosint+1
2983 years ago
BridgeKeeper preview

BridgeKeeper

GitHub0xzdh/bridgekeeper

Scrape, Hunt, and Transform names and usernames

crawleremail-harvestinginformation-gathering+2
1303 years ago
Searpy preview

Searpy

GitHubj3ers3/searpy

🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找

dns-subdomain-enumerationinformation-gatheringosint+3
2143 years ago
h8mail preview

h8mail

GitHubkhast3x/h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

email-harvestinginformation-gatheringosint+3
5.3k4 years ago