Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
seekr preview

seekr

GitHubseekr-osint/seekr

A multi-purpose OSINT toolkit with a neat web-interface.

email-harvestinginformation-gatheringosint+3
8562 months ago
ShadowNet preview

ShadowNet

GitHubantisurveillanceagency/shadownet

ShadowNet is an anonymous routing protocol that forces all connections (system-wide) to go through Tor while implementing Mixnet-like…

anti-botdigital-forensicsforensics+9
372 months ago
007-TheBond preview

007-TheBond

GitHubexaction/007-thebond

This Script will help you to gather information about your victim or friend

information-gatheringosintosint-social-engineering+2
185 years ago
querytool preview

querytool

GitHuboryon-osint/querytool

Querytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files…

curated-resourceseducationinformation-gathering+3
3187 days ago
shazhupan preview

shazhupan

GitHubpacketrat/shazhupan

Slides and IoCs from pig butchering research

curated-resourceseducationosint+2
52 years ago
sherlock preview

sherlock

GitHubsherlock-project/sherlock

Hunt down social media accounts by username across social networks

digital-forensicsforensicsinformation-gathering+7
89.9k19 days ago
Deep-Live-Cam preview

Deep-Live-Cam

GitHubhacksider/deep-live-cam

real time face swap and one-click video deepfake with only a single image

ai-securityimpersonation-toolsosint-social-engineering+2
96.0k7 days ago
Ominis-OSINT preview

Ominis-OSINT

GitHubanoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

crawlerinformation-gatheringosint+3
61014 days ago
PyLoggy preview

PyLoggy

GitHubd4vinci/pyloggy

A python keylogger that does more than any other keylogger - Key logger, Clicks logger and Screenshots

data-exfiltrationosint-social-engineeringpenetration-testing+2
5101 year ago
HiddenEyeReborn preview

HiddenEyeReborn

GitHubd4rks3c-group/hiddeneyereborn

HiddenEye Reborn in better shape than ever, rewritten from scratch and adapted to modern world

information-gatheringosint-social-engineeringpenetration-testing+3
7581 year ago
GoAT preview

GoAT

GitHubpetercunha/goat

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

command-and-controlexploitationlateral-movement+7
2619 years ago
EasyTokens preview

EasyTokens

GitHubsecdev02/easytokens

Kali365 - EvilTokens Replica

adversarial-attackauthenticationcloud-security+7
721 month ago
Twitter-Info preview

Twitter-Info

GitHubd4vinci/twitter-info

A simple python script to grab twitter account info just by username or profile link

information-gatheringosintosint-social-engineering+2
549 years ago
DeadManSwitch preview

DeadManSwitch

GitHubblacksnufkin/deadmanswitch

DeadManSwitch in rust with several triggers (remote local and network)

data-exfiltrationdefensive-toolsencryption-decryption-tools+4
249 months ago
Social-media-c2 preview

Social-media-c2

GitHubwoj-ciech/social-media-c2

Script is a proof of concept how to control your machine by using social media sites.

command-and-controlinformation-gatheringosint-social-engineering+3
238 years ago
Osinton preview

Osinton

GitHubelvonferen/osinton

Osinton Its an open-source project running using SERP API and ollama mistral

email-harvestinginformation-gatheringosint+3
118 months ago
sterraxcyl preview
Archived

sterraxcyl

GitHubnovitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

crawlerinformation-gatheringosint+2
6832 years ago
honeybits preview
Archived

honeybits

GitHub0x4d31/honeybits

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward…

information-gatheringlateral-movementosint-social-engineering+5
2787 years ago
Previous123Next