Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
111 results
StalkPhish preview
Archived

StalkPhish

GitHubt4d/stalkphish

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

forensicsincident-responseinformation-gathering+3
669
2 years ago
MITMf preview
Archived

MITMf

GitHubbyt3bl33d3r/mitmf

Framework for Man-In-The-Middle attacks

authenticationcommand-and-controldns-analysis+8
3.6k7 years ago
scambuster preview

scambuster

GitHublaugiov/scambuster

Defensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…

ai-securitydefensive-toolsemail-security+5
133 days ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns-analysisdns-subdomain-enumerationfuzzing+5
5.7k1 year ago
cyberchef-recipes preview

cyberchef-recipes

GitHubmattnotmax/cyberchef-recipes

A list of cyber-chef recipes and curated links

curated-resourcesdigital-forensicsdisk-forensics+8
2.2k2 years ago
Watcher preview

Watcher

GitHubthalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

ai-securitydata-exfiltrationdns-subdomain-enumeration+7
1.4k29 days ago
Sooty preview

Sooty

GitHubtheresafewconors/sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

dns-analysishash-analysisinformation-gathering+5
1.5k1 year ago
opensquat preview

opensquat

GitHubatenreiro/opensquat

OSINT tool that detects domain squatting, typosquatting, and phishing look-alikes by monitoring newly registered domains against brand keywords with…

dns-analysisinformation-gatheringosint+2
98224 days ago
awesome-soc-analyst preview

awesome-soc-analyst

GitHubletsdefend/awesome-soc-analyst

Useful resources for SOC Analyst and SOC Analyst candidates.

curated-resourcesdigital-forensicseducation+6
9952 years ago
catphish preview

catphish

GitHubring0lab/catphish

CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.

dns-subdomain-enumerationinformation-gatheringphishing+3
6338 years ago
osint_toolkit preview

osint_toolkit

GitHubdev-lu/osint_toolkit

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

ai-securityeducationemail-security+6
9353 months ago
urlcrazy preview

urlcrazy

GitHuburbanadventurer/urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

dns-analysisinformation-gatheringosint+2
6931 year ago
analyzer preview

analyzer

GitHubqeeqbox/analyzer

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries,…

digital-forensicsdynamic-analysis-sandboxingforensics+8
3202 years ago
typodetect preview

typodetect

GitHubtelefonicatc2tech/typodetect

Detects active domain mutations to prevent phishing and smishing. Uses IANA TLDs, blockchain DNS validation, and DoH malware reports. Outputs JSON or…

dns-analysisinformation-gatheringosint+2
755 years ago
Phishruffus preview

Phishruffus

GitHubjh00nbr/phishruffus

Intelligent threat hunter and phishing servers

dns-analysisinformation-gatheringphishing+2
477 years ago
antisquat preview

antisquat

GitHubredhuntlabs/antisquat

AI-powered typosquatting and phishing domain detector using NLP and ChatGPT to generate domain permutations and extract contact information from…

dns-subdomain-enumerationinformation-gatheringmachine-learning+2
561 year ago
huntglyph preview

huntglyph

GitHubgregory-chatelier/huntglyph

Detect visually similar characters (homoglyphs) and hidden data in text to protect against deceptive attacks

dns-analysisinformation-gatheringosint+3
18 months ago
young-domain-guard preview

young-domain-guard

GitHubilianazz/young-domain-guard
dns-analysisinformation-gatheringphishing+2
73 months ago
Previous1234567Next