Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
LangAlpha preview

LangAlpha

GitHubginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

crawlerdata-exfiltrationinformation-gathering+6
1.8k
2 days ago
WEBFANG preview

WEBFANG

GitHubtalyx66/webfang

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…

crawlerdns-analysisinformation-gathering+6
1187 days ago
Gideon preview

Gideon

GitHubcogensec/gideon

Autonomous security operations agent for threat intelligence, vulnerability research, IOC analysis, and red teaming. Supports dual-mode operations…

ai-securitycommand-and-controleducation+9
332 months ago
FinalRecon preview

FinalRecon

GitHubthewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

crawlerdns-analysisinformation-gathering+7
3.0k3 months ago
Mr.Holmes preview

Mr.Holmes

GitHublucksi/mr.holmes

Modular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…

dns-subdomain-enumerationeducationemail-harvesting+3
4.2k7 months ago
knockpy preview

knockpy

GitHubguelfoweb/knockpy

Knock Subdomain Scan

dns-analysisdns-subdomain-enumerationinformation-gathering+4
4.2k7 months ago
OllamaHound preview

OllamaHound

GitHub7h30th3r0n3/ollamahound

Mass reconnaissance, version fingerprinting, CVE tester and live exploitation framework for Ollama open instances.

command-and-controlexploitationinformation-gathering+6
627 months ago
fsociety preview

fsociety

GitHubfsociety-team/fsociety

A Modular Penetration Testing Framework

exploit-frameworksinformation-gatheringnetwork-security+7
1.8k8 months ago
GitMiner3 preview

GitMiner3

GitHubunkl4b/gitminer3

Tool for advanced mining for content on Github

code-analysisinformation-gatheringosint+3
5610 months ago
Sububy preview

Sububy

GitHuba3h1nt/sububy

Modular subdomain enumeration suite with certificate transparency, DNS brute-force, and API-based discovery. Includes post-enumeration modules for…

dns-subdomain-enumerationinformation-gatheringosint+2
71 year ago
R4venzCl4w preview

R4venzCl4w

GitHubsc4rfurry/r4venzcl4w

A Modular Framework for Pentesters and Bug Hunters written in python.

information-gatheringnetwork-mappingosint+4
51 year ago
Maryam preview
Archived

Maryam

GitHubsaeeddhqan/maryam

Maryam: Open-source Intelligence(OSINT) Framework

dns-subdomain-enumerationinformation-gatheringosint+2
1.2k2 years ago
Pip-Intel preview

Pip-Intel

GitHubemrekybs/pip-intel

Modular OSINT tool that aggregates email, phone, IP, and social media intelligence via pip packages. Automates data collection and analysis for…

information-gatheringosintosint-social-engineering+1
2422 years ago
subcrawl preview

subcrawl

GitHubhpthreatresearch/subcrawl

Modular framework for discovering and analyzing open directories on the web. Crawls URLs, extracts content, applies YARA/ClamAV scanning, and outputs…

crawlerinformation-gatheringosint+3
1503 years ago
warf preview

warf

GitHubiamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

information-gatheringosintpenetration-testing+3
1944 years ago
Hale preview

Hale

GitHubpjlantz/hale

Botnet command & control monitor

command-and-controlincident-responseinformation-gathering+5
2024 years ago
manuka preview

manuka

GitHubspaceraccoon/manuka

A modular OSINT honeypot for blue teamers

defensive-toolsinformation-gatheringosint+2
3495 years ago
fileintel preview

fileintel

GitHubkeithjjones/fileintel

A modular Python application to pull intelligence about malicious files

hash-analysisinformation-gatheringmalware-analysis+2
1235 years ago
Previous12Next