Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
LANs.py preview

LANs.py

GitHubdanmcinerney/lans.py

ARP spoofing and MITM tool for intercepting HTTP/FTP/IMAP/POP3/IRC traffic, injecting HTML/JS, DNS spoofing, and WiFi deauth jamming on local…

dns-analysisinformation-gatheringnetwork-security+6
2.6k
7 years ago
Cooper preview

Cooper

GitHubchrismaddalena/cooper

A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.

information-gatheringphishingphishing-tools+2
601 month ago
fbht preview

fbht

GitHubchinoogawa/fbht

Automated Facebook account security testing tool using Selenium and Mechanize for credential harvesting, graph analysis, and social engineering…

information-gatheringosintpassword-attacks+3
1.6k2 years ago
Vajra preview

Vajra

GitHubtrouble-1/vajra

Offensive cloud security toolkit with web UI for attacking and enumerating Azure and AWS environments. Features OAuth phishing, password attacks, IAM…

cloud-securityinformation-gatheringmisconfiguration+4
4101 year ago
Phishruffus preview

Phishruffus

GitHubjh00nbr/phishruffus

Intelligent threat hunter and phishing servers

dns-analysisinformation-gatheringphishing+2
477 years ago
lockphish preview
Archived

lockphish

GitHubjaykali/lockphish

Phishing tool targeting lock screens to capture Windows credentials, Android PINs, and iPhone passcodes via HTTPS links with automatic device…

information-gatheringmobile-securitypassword-attacks+3
9965 years ago
ntlm_theft preview

ntlm_theft

GitHubgreenwolf/ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

information-gatheringpassword-attackspenetration-testing+2
1.5k11 months ago
NtlmRelayToEWS preview

NtlmRelayToEWS

GitHubarno0x/ntlmrelaytoews

Relays NTLM authentication to Exchange Web Services for mailbox access, email sending, forwarding rule creation, and Outlook command execution via…

email-securityexploitationinformation-gathering+4
3328 years ago
crime-mapper preview

crime-mapper

GitHubmr-r3b00t/crime-mapper

Browser-based OSINT mapper for cyber crime: enriches IPs, domains, and emails via Shodan, Hudson Rock, and IPInfo; analyzes email headers/time deltas…

digital-forensicsemail-securityinformation-gathering+3
2417 months ago
PhEmail preview

PhEmail

GitHubdionach/phemail

Automated phishing email tool with LinkedIn email harvesting, Gmail authentication, and web portal cloning for credential theft during social…

email-harvestinginformation-gatheringosint+4
3496 years ago
ExWA preview

ExWA

GitHubdalpan/exwa

CLI-based WhatsApp client with API integration for reading messages, sending texts, and executing bulk spam messaging campaigns via rapiwha.com.

information-gatheringosintphishing-tools+1
65 years ago
ALHacking preview

ALHacking

GitHub4lbh4cker/alhacking

Multi-purpose ethical hacking toolkit for information gathering, phishing, password attacks, DDoS, and social engineering on Android and Linux.

information-gatheringosintpassword-attacks+2
1.6k1 year ago
certstreamcatcher preview

certstreamcatcher

GitHubjimywork/certstreamcatcher

This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA)…

information-gatheringosintphishing+2
807 years ago
doctrack preview

doctrack

GitHubwavvs/doctrack

Tool to manipulate and weaponize Office Open XML documents.

information-gatheringpayload-generationphishing-tools+1
723 years ago
toxssin preview

toxssin

GitHubt3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

exploitationinformation-gatheringpayload-generation+4
1.4k1 year ago
FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp preview

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

GitHubfuckjsonp/fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

Honeypot-based OSINT tool that harvests phone numbers of red team operators via JSONP callbacks and XSS, targeting users of mobile hotspots and…

information-gatheringosintphishing-tools+3
4094 years ago
Storm-Breaker preview

Storm-Breaker

GitHubultrasecurity/storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

information-gatheringosintphishing-tools+2
5.8k1 year ago
social_mapper preview

social_mapper

GitHubgreenwolf/social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

information-gatheringosintpenetration-testing+4
4.1k4 years ago
Previous123Next