Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

29 results

Archived

Namechk

gonzosint/namechk

Shell-based OSINT tool for bulk username availability and usage checks across 100+ websites, forums, and social networks.

information-gatheringosintosint-social-engineering+2

617

5 years ago

Archived

goddi

netspi/goddi

Go-based Active Directory domain information dumper that extracts users, groups, trusts, GPOs, SPNs, LAPS passwords, and GPP credentials via LDAP for…

information-gatheringosintpenetration-testing+2

4244 years ago

certstreamcatcher

jimywork/certstreamcatcher

This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…

information-gatheringosintphishing+2

807 years ago

creepy

ilektrojohn/creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

information-gatheringosintreconnaissance+1

1.5k12 years ago

cve-2024-21762-checker

rdoix/cve-2024-21762-checker

Shodan-based scanner that discovers FortiGate SSL VPN devices and tests them for CVE-2024-21762 vulnerability, displaying organization and country…

exploitationnetwork-securityosint+3

12 years ago

dorky

codingo/dorky

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

information-gatheringosintreconnaissance

2472 years ago

RF-CHAOS

scramblr/rf-chaos

Android-native RF auditing toolkit for scanning, logging, and tracking WiFi, Bluetooth, BLE, and NFC devices, with GPS logging, WiGLE export, and BLE…

bluetooth-securityexploitationinformation-gathering+7

375 months ago

Archived

exist

nict-csl/exist

Web application for aggregating and analyzing cyber threat intelligence from multiple feeds and APIs, enabling cross-search of indicators, automated…

educationincident-responseinformation-gathering+6

1525 months ago

SecretFinder

m4ll0k/secretfinder

Regex-based scanner that discovers API keys, tokens, JWTs, and other secrets in JavaScript files, with support for URL extraction, custom regex, and…

information-gatheringosintsecret-detection+1

2.5k2 years ago

phishing_catcher

x0rz/phishing_catcher

Real-time phishing domain detection by monitoring Certificate Transparency logs via CertStream, scoring suspicious TLS certificate issuances based on…

dns-analysisosintphishing+1

1.8k5 years ago

tookie-osint

alfredredbird/tookie-osint

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

information-gatheringosintosint-social-engineering+2

2.8k1 month ago

chiasmodon

chiasmod0n/chiasmodon

Multi-source OSINT tool for domain, email, credential, IP, ASN, CIDR, and Google Play app reconnaissance with comprehensive scanning and customizable…

dns-subdomain-enumerationemail-harvestinginformation-gathering+5

6991 year ago

D4N155

owasp/d4n155

OSINT-driven wordlist generator that crawls target web content to create intelligent, dynamic wordlists for penetration testing and security auditing.

crawlerinformation-gatheringosint+1

27021 days ago

Archived

Maryam

saeeddhqan/maryam

Modular OSINT framework for harvesting data from open sources and search engines. Supports DNS enumeration, social network scraping, and web API mode…

dns-subdomain-enumerationinformation-gatheringosint+2

1.2k1 year ago