Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
737 results
Git-Secret preview
Archived

Git-Secret

GitHubdaffainfo/git-secret

Go scripts for finding sensitive data like API key / some keywords in the github repository

code-analysisinformation-gatheringosint+3
159
4 years ago
EmailFinder preview
Archived

EmailFinder

GitHubjosue87/emailfinder

Search emails from a domain through search engines

crawleremail-harvestinginformation-gathering+2
4243 years ago
LeakLooker preview
Archived

LeakLooker

GitHubwoj-ciech/leaklooker

Find open databases - Powered by Binaryedge.io

cloud-securitydatabase-securityinformation-gathering+5
1.5k6 years ago
ph0neutria preview
Archived

ph0neutria

GitHubphage-nz/ph0neutria

ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.

information-gatheringmalware-analysisosint+1
3016 years ago
maltrieve preview
Archived

maltrieve

GitHubkrmaxwell/maltrieve

A tool to retrieve malware directly from the source for security researchers.

crawlerinformation-gatheringmalware-analysis+2
5649 years ago
bug-bounty-domains preview
Archived

bug-bounty-domains

GitHubarpsyndicate/bug-bounty-domains

Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]

curated-resourcesinformation-gatheringosint+2
2282 years ago
SEcraper preview
Archived

SEcraper

GitHubzerobyte-id/secraper

Search engine scraper tool with BASH script.

crawlerinformation-gatheringosint+2
836 years ago
sterraxcyl preview
Archived

sterraxcyl

GitHubnovitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

crawlerinformation-gatheringosint+2
6802 years ago
C2-Tracker preview
Archived

C2-Tracker

GitHubmontysecurity/c2-tracker

Live Feed of C2 servers, tools, and botnets

command-and-controlinformation-gatheringioc-management+5
7855 months ago
ipmap preview
Archived

ipmap

GitHubrly0nheart/ipmap

A cross-platform easy-to-use ip geolocation & mapping tool.

general-purpose-utilitiesinformation-gatheringosint+1
73 years ago
Geogramint preview
Archived

Geogramint

GitHubalb-310/geogramint

An OSINT Geolocalization tool for Telegram that find nearby users and groups 📡🌍🔍

information-gatheringmobile-securityosint+3
7292 years ago
pwndb preview
Archived

pwndb

GitHubjxlil/pwndb

Tor-based leaked credential search tool that queries the pwndb2 hidden service to find emails and passwords exposed in data breaches, with wildcard…

data-exfiltrationinformation-gatheringosint+3
55 years ago
jsleak preview
Archived

jsleak

GitHub0xteles/jsleak

a Go code to detect leaks in JS files via regex patterns

information-gatheringosintreconnaissance+3
1514 years ago
gitls preview
Archived

gitls

GitHubhahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

information-gatheringosintpenetration-testing+2
571 year ago
gitrob preview
Archived

gitrob

GitHubmichenriksen/gitrob

Reconnaissance tool for GitHub organizations

information-gatheringosintreconnaissance+4
6.2k3 years ago
SharpHound3 preview
Archived

SharpHound3

GitHubbloodhoundad/sharphound3

C# Data Collector for the BloodHound Project, Version 3

information-gatheringosintpenetration-testing+2
5574 years ago
melting-cobalt preview
Archived

melting-cobalt

GitHubsplunk/melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

command-and-controlinformation-gatheringnetwork-security+3
1693 years ago
httpx preview

httpx

GitHubprojectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18
10.4k3 days ago
Previous1…373839…41Next