Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

201 results

SCANNER-INURLBR

googleinurl/scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

email-harvestinginformation-gatheringosint+2

880

5 years ago

tinfoleak

vaguileradiaz/tinfoleak

The most complete open-source tool for Twitter intelligence analysis

information-gatheringosintreconnaissance+1

2.0k8 years ago

netlas-cookbook

netlas-io/netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…

curated-resourcesdigital-forensicseducation+9

8891 year ago

armory

depthsecurity/armory

Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related…

information-gatheringosintpenetration-testing+2

42728 days ago

pwnbin

kahunalu/pwnbin

Python Pastebin Webcrawler that returns list of public pastebins containing keywords

crawlerdata-exfiltrationinformation-gathering+1

4516 years ago

subjs

lc/subjs

Fetches javascript file from a list of URLS or subdomains.

information-gatheringosintreconnaissance+1

8611 year ago

Needl

eth0izzle/needl

Take back your privacy. Lose yourself in the haystack.

information-gatheringosintprivacy+1

5621 year ago

DataSurgeon

drew-alleman/datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

ctfdata-exfiltrationforensics+6

9022 years ago

porch-pirate

watchdogsecurity/porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…

api-securityinformation-gatheringosint+4

4672 years ago

Skadi

orlikoski/skadi

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

curated-resourcesdigital-forensicsdisk-forensics+9

5183 years ago

warcannon

c6fc/warcannon

High speed/Low cost CommonCrawl RegExp in Node.js

cloud-securitycrawlerdata-exfiltration+3

2562 years ago

SCANNER-INURLBR

mrcl0wnlab/scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation…

crawlerdns-subdomain-enumerationemail-harvesting+6

2281 year ago

Reconky-Automated_Bash_Script

shivamrai2003/reconky-automated_bash_script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which…

information-gatheringosintpenetration-testing+5

2043 years ago

useragent

projectdiscovery/useragent

Curated list of categorized User Agents

general-purpose-utilitiesinformation-gatheringosint+2

1193 months ago

Instagram-Crawler

hehpollon/instagram-crawler

Non API. Crawling post (photo, likes, comments, date ...) by username, hashtags

crawlerinformation-gatheringosint+1

865 years ago

ail-typo-squatting

typosquatter/ail-typo-squatting

Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.

dns-analysisinformation-gatheringosint+2

1081 year ago

CertCrunchy

joda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

dns-subdomain-enumerationinformation-gatheringosint+1

293 months ago

ReconCat

daudmalik06/reconcat

A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or…

information-gatheringosintpenetration-testing+2

788 years ago

Previous 123…12 Next