Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
osint_toolkit preview

osint_toolkit

GitHubdev-lu/osint_toolkit

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

ai-securityeducationemail-security+6
935
3 months ago
bromure preview

bromure

GitHubrderaison/bromure

Proper sandboxing for agentic coding and web browsing

ai-securitycontainer-securitydynamic-analysis-sandboxing+6
2752 days ago
EvilNeko preview

EvilNeko

GitHubcorvralabs/evilneko
container-securitypenetration-testingphishing+3
797 months ago
zphisher preview

zphisher

GitHubhtr-tech/zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

educationphishingphishing-tools+1
16.7k2 years ago
catphish preview

catphish

GitHubring0lab/catphish

CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.

dns-subdomain-enumerationinformation-gatheringphishing+3
6338 years ago
lxancephisher preview

lxancephisher

GitHublxance-hacker/lxancephisher

Automated phishing simulation tool with 30+ login page templates, URL masking, and multiple tunneling options (Ngrok, Cloudflared, Serveo) for…

educationphishingphishing-tools+1
291 year ago
Watcher preview

Watcher

GitHubthalesgroup-cert/watcher

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

ai-securitydata-exfiltrationdns-subdomain-enumeration+7
1.4k29 days ago
PhishingKitHunter preview

PhishingKitHunter

GitHubt4d/phishingkithunter

Find phishing kits which use your brand/organization's files and image.

information-gatheringlog-analysisosint+3
2417 years ago
phishing_catcher preview

phishing_catcher

GitHubx0rz/phishing_catcher

Phishing catcher using Certstream

dns-analysisosintphishing+1
1.8k5 years ago
ChromeAlone preview

ChromeAlone

GitHubpraetorian-inc/chromealone

A tool to transform Chromium browsers into a C2 Implant

command-and-controlpayload-developmentpersistence-mechanisms+6
6009 months ago
CVE-2021-46398 preview
Archived

CVE-2021-46398

GitHublaliea/cve-2021-46398

A Proof of Concept for the CVE-2021-46398 flaw exploitation

educationexploitationlabs-practice+3
2 years ago
EvilnoVNC preview

EvilnoVNC

GitHubjoelgmsec/evilnovnc

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

information-gatheringpassword-crackingphishing+3
1.2k1 year ago
Tangled preview

Tangled

GitHubineesdv/tangled

Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.

command-and-controlemail-securitylateral-movement+5
2758 months ago
Johnny-You-Are-Fired preview

Johnny-You-Are-Fired

GitHubrub-nds/johnny-you-are-fired

Artifacts for the USENIX publication.

cryptographyemail-securitypapers-research+3
566 years ago
XLL_Phishing preview

XLL_Phishing

GitHuboctoberfest7/xll_phishing

XLL Phishing Tradecraft

defensive-toolsexploitationpayload-development+7
4404 years ago
EasyTokens preview

EasyTokens

GitHubsecdev02/easytokens

Kali365 - EvilTokens Replica

adversarial-attackauthenticationcloud-security+7
721 month ago