Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

30 results

Archived

dr_robot

sandialabs/dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

container-securitydns-analysisdns-subdomain-enumeration+5

143

3 years ago

OSINT-with-LLM

mouna23/osint-with-llm

It’s an OSINT reconnaissance poc powered by Local LLMs (Ollama). You can feed it an email, domain, or IP, and it automatically performs multiple…

educationemail-harvestinginformation-gathering+3

8511 months ago

buster

sham00n/buster

An advanced tool for email reconnaissance

email-harvestinginformation-gatheringosint+2

1.4k7 years ago

creepy-plugins

ilektrojohn/creepy-plugins

Plugins for cree.py

information-gatheringosintosint-social-engineering+2

4712 years ago

scenester

nccgroup/scenester

A tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application.

information-gatheringosintpenetration-testing+2

3110 years ago

awesome-search-queries

projectdiscovery/awesome-search-queries

Community curated list of search queries for various products across multiple search engines.

curated-resourcesdns-subdomain-enumerationeducation+5

4169h 39m ago

domain

jhaddix/domain

Setup script for Regon-ng

dns-subdomain-enumerationinformation-gatheringosint+2

9418 years ago

CF-Hero

musana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

dns-analysisfingerprint-spoofinginformation-gathering+5

2.6k4 months ago

awesome-hacking-lists

taielab/awesome-hacking-lists

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and…

curated-resourceseducationexploit-frameworks+6

1.4k10 months ago

Threat-Intelligence-Hunter

abhinavbom/threat-intelligence-hunter

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…

information-gatheringioc-managementosint+1

1588 years ago

telegram-history-dump

tvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…

data-exfiltrationinformation-gatheringosint+1

6808 years ago

quick-lookup-ptrun

gtgalaxi/quick-lookup-ptrun

PowerToys Run plugin for instant IP, domain, and hash lookups across multiple threat intelligence platforms like Shodan, VirusTotal, and GreyNoise.

information-gatheringosintutilities-frameworks

1771 year ago

whatsfoto

zoutepopcorn/whatsfoto

Chrome extension to download WhatsApp profile pictures in bulk from a CSV list of phone numbers, outputting images as a ZIP archive for OSINT…

information-gatheringosintprivacy+1

208 years ago

EyeWitness

redsiege/eyewitness

Automated web screenshot tool for reconnaissance, capturing site visuals, server headers, and identifying default credentials. Supports multiple…

information-gatheringosintpenetration-testing+2

5.9k9 months ago

Open-Source-Threat-Intel-Feeds

bert-janp/open-source-threat-intel-feeds

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

intrusion-detectionioc-managementnetwork-security+3

96820h 20m ago

ThreatIngestor

pedramamini/threatingestor

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

information-gatheringintrusion-detectionioc-management+3

9335 months ago

operative-framework

graniet/operative-framework

operative framework is a rust investigation OSINT framework, you can interact with multiple targets, execute multiple modules, create links with…

forensicsinformation-gatheringosint+1

7542 years ago

xurlfind3r

hueristiq/xurlfind3r

Passive URL discovery tool that collects domain-associated URLs from multiple public sources via command-line, supporting stdin/stdout and JSONL…

information-gatheringosintpenetration-testing+2

73111 months ago

Previous12 Next