Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

29 results

RansomLook

ransomlook/ransomlook

Automated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…

crawlerdefensive-toolsinformation-gathering+3

659

5 days ago

dorky

codingo/dorky

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

information-gatheringosintreconnaissance

2472 years ago

RF-CHAOS

scramblr/rf-chaos

Android-native RF auditing toolkit for scanning, logging, and tracking WiFi, Bluetooth, BLE, and NFC devices, with GPS logging, WiGLE export, and BLE…

bluetooth-securityexploitationinformation-gathering+7

375 months ago

cc.py

si9int/cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

crawlerinformation-gatheringosint+3

2758 months ago

startpage-parser

mindpatch/startpage-parser

parsing search results from startpage search engine (based on google.com results)

crawlergeneral-purpose-utilitiesinformation-gathering+2

175 years ago

cve-2024-21762-checker

rdoix/cve-2024-21762-checker

Shodan-based scanner that discovers FortiGate SSL VPN devices and tests them for CVE-2024-21762 vulnerability, displaying organization and country…

exploitationnetwork-securityosint+3

12 years ago

smartmap

space0blaster/smartmap

LLM based map for research, exploration and discovery.

ai-securityeducationinformation-gathering+2

511 year ago

banrays

nullpxl/banrays

Glasses to detect smart-glasses that have cameras. Ray-BANNED

bluetooth-securityeducationembedded-systems-security+7

31323 days ago

geolocation-tool

jimaek/geolocation-tool

Geo locate any IP to a physical location using latency

general-purpose-utilitiesinformation-gatheringnetwork-mapping+2

1326 months ago

Quantickle

rsac-labs/quantickle

A graphing toolkit for threat research - and other things

information-gatheringosintreconnaissance+2

195 months ago

phishing_catcher

x0rz/phishing_catcher

Real-time phishing domain detection by monitoring Certificate Transparency logs via CertStream, scoring suspicious TLS certificate issuances based on…

dns-analysisosintphishing+1

1.8k5 years ago

security-study-plan

jassics/security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…

api-securitycloud-securitycryptography+8

5.0k13 days ago

TwLocation

mazenelzanaty/twlocation

Python script that gets Twitter users' tweets location

information-gatheringosintreconnaissance

1088 years ago

creepy

ilektrojohn/creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

information-gatheringosintreconnaissance+1

1.5k12 years ago

BlackWidow

1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

fuzzinginformation-gatheringosint+3

1.8k4 months ago

D4N155

owasp/d4n155

OSINT-driven wordlist generator that crawls target web content to create intelligent, dynamic wordlists for penetration testing and security auditing.

crawlerinformation-gatheringosint+1

27021 days ago

SecretFinder

m4ll0k/secretfinder

Regex-based scanner that discovers API keys, tokens, JWTs, and other secrets in JavaScript files, with support for URL extraction, custom regex, and…

information-gatheringosintsecret-detection+1

2.5k2 years ago

certstreamcatcher

jimywork/certstreamcatcher

This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…

information-gatheringosintphishing+2

807 years ago

Previous12 Next