Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
268 results
wifit3 preview

wifit3

GitHubderv82/wifit3

Wifite but USB-only & cross-platform.

information-gatheringpacket-sniffing-analysispassword-attacks+3
2.7k19h 30m ago
fsociety preview

fsociety

GitHubmanisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

exploitationinformation-gatheringpassword-attacks+6
12.4k3 months ago
pwneye preview

pwneye

GitHubhackerest/pwneye

Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥

exploitationhardware-iot-securityinformation-gathering+7
3991 month ago
GoFileX preview

GoFileX

GitHubabraxas/gofilex

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

ctfinformation-gatheringpassword-attacks+5
17 days ago
AngryOxide preview

AngryOxide

GitHubragnt/angryoxide

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

exploitationinformation-gatheringpacket-sniffing-analysis+5
2.0k4 hours ago
ntlmscout preview

ntlmscout

GitHubboydhacks/ntlmscout

Unauthenticated NTLM endpoint reconnaissance tool that decodes Type-2 challenges across HTTP, SMB, MSSQL, SMTP, IMAP, POP3, NNTP, LDAP, and RDP to…

authenticationdns-analysisinformation-gathering+8
551 month ago
arsenal preview

arsenal

GitHuborange-cyberdefense/arsenal

Arsenal is just a quick inventory and launcher for hacking programs

command-and-controldns-analysisexploitation+6
3.8k1 year ago
qyvora-toha3ee preview

qyvora-toha3ee

GitHubqyvora/qyvora-toha3ee

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

exploitationnetwork-securityosint+9
55 days ago
Nettacker preview

Nettacker

GitHubowasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

api-securityapi-security-testingdynamic-code-analysis+14
5.7k12h 17m ago
shodanwave preview

shodanwave

GitHubjimywork/shodanwave

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

exploitationinformation-gatheringiot-security+5
2698 years ago
fbchecker preview

fbchecker

GitHubfdciabdul/fbchecker

Facebook Mass Account Checker

information-gatheringosintpassword-attacks+1
596 years ago
CamOver preview

CamOver

GitHubentysec/camover

CamOver is a camera exploitation tool that allows to disclosure network camera admin password.

exploitationinformation-gatheringiot-security+1
6052 years ago
sshamble preview

sshamble

GitHubrunzeroinc/sshamble

Research tool that scans SSH services for authentication bypasses, timing leaks, weak keys, and post-session exposures, with JSON output and analysis.

authenticationdefensive-toolsinformation-gathering+6
1.2k1 month ago
EBurst preview

EBurst

GitHubgrayddq/eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。

authenticationemail-securityinformation-gathering+4
3453 years ago
uberscan preview

uberscan

GitHubbatchmcnulty/uberscan

Security program for recovering passwords and pen-testing servers, routers and IoT devices using brute-force password attacks.

information-gatheringiot-securitynetwork-security+2
562 years ago
brutas preview

brutas

GitHubtasooshi/brutas

Wordlists handcrafted (and automated) with ♥

information-gatheringpassword-attackspassword-cracking+2
2371 year ago
TurkoRat preview

TurkoRat

GitHubcryst4linqq/turkorat

Fully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)

anti-botdata-exfiltrationinformation-gathering+5
1844 years ago
Oh365UserFinder preview

Oh365UserFinder

GitHubdievus/oh365userfinder

Enumerates valid Microsoft 365 accounts and domains via response analysis, with password spraying support and throttling detection to avoid lockouts.

information-gatheringosintpassword-attacks+1
5788 months ago
Previous12…15Next