Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
gaia preview

gaia

GitHuboksuzkayra/gaia

Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.

ai-securitycrawlerinformation-gathering+7
46
7 months ago
goodoldsearch-oss preview

goodoldsearch-oss

GitHubmrtdlgc/goodoldsearch-oss

Local static query builder for precise search across web engines, Shodan, crt.sh, and Wayback Machine. Supports Google dorks, filetype filters, date…

curated-resourcesdns-subdomain-enumerationeducation+6
213 months ago
shhgit preview

shhgit

GitHubeth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

code-analysisdevsecopsosint+2
4.0k1 year ago
git-hound preview

git-hound

GitHubtillson/git-hound

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

code-analysisdevsecopsinformation-gathering+4
1.5k9 months ago
hyperhives-macos-infostealer-analysis preview

hyperhives-macos-infostealer-analysis

GitHubdarksp33d/hyperhives-macos-infostealer-analysis

Full static analysis of HyperHives macOS Rust infostealer — 571 decrypted config values, C2 infrastructure, DPRK/Contagious Interview attribution,…

curated-resourceseducationforensics+6
325 months ago
follina-msdt-threat-investigation preview

follina-msdt-threat-investigation

GitHubzavikhttak/follina-msdt-threat-investigation

🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal,…

digital-forensicseducationincident-response+4
1 month ago
blackhat-python3 preview

blackhat-python3

GitHubeonraider/blackhat-python3

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

code-analysiscryptographyeducation+8
2.4k3 years ago
PolinRider preview

PolinRider

GitHubopensourcemalware/polinrider

Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

code-analysiscurated-resourceseducation+8
892 months ago
claudleak preview

claudleak

GitHubhazcod/claudleak

Hunt for AI coding artifacts containing secrets.

cloud-securitycode-analysisinformation-gathering+3
576 months ago
boa-cve-2009-4496-analysis preview

boa-cve-2009-4496-analysis

GitHubenriquenegri-cyberlaw/boa-cve-2009-4496-analysis

Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.

code-analysiseducationosint+3
23 days ago
unauthscout preview

unauthscout

GitHubrmottanet/unauthscout

UnauthScout is an OSINT (Open Source Intelligence) tool developed in Bash for passive exploration of assets on version control platforms (GitLab and…

code-analysisgeneral-purpose-utilitiesosint+2
57 months ago
Leaktopus preview
Archived

Leaktopus

GitHubplaytikaoss/leaktopus

Automated secret and leak detection scanner for GitHub and paste sites, with heuristic filtering, IOL enrichment via Shhgit/TruffleHog, and ELK-based…

code-analysisdevsecopsincident-response+6
305 months ago
indicator-intelligence preview

indicator-intelligence

GitHubosmankandemir/indicator-intelligence

Collects static files from target domains to discover related domains and IPv4 addresses for threat intelligence and IOC enrichment.

dns-subdomain-enumerationinformation-gatheringosint+1
1021 year ago
git-wild-hunt preview

git-wild-hunt

GitHubjosehelps/git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

code-analysisinformation-gatheringosint+1
2983 years ago
git-vuln-finder preview

git-vuln-finder

GitHubcve-search/git-vuln-finder

Finding potential software vulnerabilities from git commit messages

code-analysisosintvulnerability-analysis
4282 years ago
DepFuzzer preview

DepFuzzer

GitHubsynacktiv/depfuzzer

Scans project dependencies for dependency confusion vulnerabilities and checks package owner email takeover risks across multiple registries (npm,…

code-analysisosintreconnaissance+2
968 months ago
gitcolombo preview

gitcolombo

GitHubsoxoj/gitcolombo

🧬 Extract and analyze contributors info from git repos

code-analysisinformation-gatheringosint
947 days ago
githubFind3r preview

githubFind3r

GitHubatmoner/githubfind3r

Command-line tool for fast searching of GitHub repositories, users, and commits to gather open-source intelligence and code-related information.

code-analysisinformation-gatheringosint+1
296 years ago
Previous12Next