Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
BlackWidow preview

BlackWidow

GitHub1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

fuzzinginformation-gatheringosint+3
1.8k
4 months ago
awesome-web-hacking preview

awesome-web-hacking

GitHubinfoslack/awesome-web-hacking

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

cryptographyctfcurated-resources+6
7.3k21 days ago
TIDoS-Framework preview

TIDoS-Framework

GitHub0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

exploitationfuzzinginformation-gathering+7
1.9k5 years ago
evilwaf preview

evilwaf

GitHubmatrixleons/evilwaf

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

fingerprint-spoofinginformation-gatheringosint+6
89027 days ago
google-dorks-bug-bounty preview

google-dorks-bug-bounty

GitHubtaksec/google-dorks-bug-bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

curated-resourcesinformation-gatheringosint+2
1.9k11 months ago
cyberbro preview

cyberbro

GitHubstanfrbd/cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

defensive-toolsdns-analysiseducation+9
68424 days ago
hostintel preview

hostintel

GitHubkeithjjones/hostintel

A modular Python application to collect intelligence for malicious hosts.

information-gatheringosintreconnaissance+1
2745 years ago
ULTIMATE-CYBERSECURITY-MASTER-GUIDE preview

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

GitHubpnwcomputers/ultimate-cybersecurity-master-guide

This repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…

ctfcurated-resourcesdigital-forensics+8
1421 day ago
fileintel preview

fileintel

GitHubkeithjjones/fileintel

A modular Python application to pull intelligence about malicious files

hash-analysisinformation-gatheringmalware-analysis+2
1235 years ago
warf preview

warf

GitHubiamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

information-gatheringosintpenetration-testing+3
1944 years ago
HackerInfo preview

HackerInfo

GitHubmatrix07ksa/hackerinfo

Hackerinfo infromations Web Application Security

information-gatheringosintvulnerability-scanners+1
766 years ago
ReconCat preview

ReconCat

GitHubdaudmalik06/reconcat

A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or…

information-gatheringosintpenetration-testing+2
788 years ago
Artemis preview

Artemis

GitHubhadesscs/artemis

Extracts and investigates infrastructure (IPs, domains) from APK files, with manifest parsing and WHOIS lookup for mobile application reconnaissance.

android-securityinformation-gatheringmobile-security+2
663 years ago
insightsnexus preview

insightsnexus

GitHubcyberintel-labs/insightsnexus

OSINT Graph Investigation Application

curated-resourcesdns-subdomain-enumerationeducation+7
348 months ago
scenester preview

scenester

GitHubnccgroup/scenester

A tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application.

information-gatheringosintpenetration-testing+2
3110 years ago
hostresolver preview

hostresolver

GitHubnccgroup/hostresolver

A Windows application to help out with external infrastructure scans.

dns-analysisdns-subdomain-enumerationinformation-gathering+5
1313 years ago
Olyx preview

Olyx

GitLabshacode/olyx

🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…

android-securityapi-securitydns-analysis+7
7 months ago
exist preview
Archived

exist

GitHubnict-csl/exist

EXIST is a web application for aggregating and analyzing cyber threat intelligence.

educationincident-responseinformation-gathering+6
1525 months ago
Previous123Next