Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

22 results

peeko

b3rito/peeko

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

command-and-controldata-exfiltrationinformation-gathering+7

233

1 year ago

ivre

ivre/ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…

dns-analysisinformation-gatheringnetwork-mapping+4

4.1k25 days ago

Archived

xray

evilsocket/xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

dns-analysisdns-subdomain-enumerationinformation-gathering+5

2.3k2 years ago

ReconDog

s0md3v/recondog

Reconnaissance Swiss Army Knife

dns-analysisinformation-gatheringosint+3

2.1k7 years ago

singularity

nccgroup/singularity

A DNS rebinding attack framework.

dns-analysisexploitationinformation-gathering+6

1.3k1 month ago

Archived

Gorsair

ullaakut/gorsair

Gorsair gives root access on remote docker containers that expose their APIs

cloud-securitycontainer-securityexploitation+6

8472 years ago

Dome

v4d1/dome

Fast Python-based subdomain enumeration tool combining passive OSINT and active brute-force scanning with DNS wildcard detection, port scanning, and…

dns-analysisosintpenetration-testing+3

5452 years ago

CallStranger

yunuscadirci/callstranger

Vulnerability checker for Callstranger (CVE-2020-12695)

data-exfiltrationdns-analysisiot-security+3

4035 years ago

omnisci3nt

spyboy-productions/omnisci3nt

Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL…

dns-analysisinformation-gatheringosint+6

3682 months ago

kimi

alechilczenko/kimi

Attack Surface Discovery tool built on a microservice approach, utilizing multi-threading for fast, internet-scale asset indexing

educationinformation-gatheringiot-security+3

2638 months ago

rainmap-lite

cldrn/rainmap-lite

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

network-mappingport-scanningvulnerability-scanners+1

2345 years ago

SharpSploitConsole

anthemtotheego/sharpsploitconsole

command-and-controlexploitationinformation-gathering+9

1824 years ago

ipmi

zenfish/ipmi

IPMI stuff from DARPA work

authenticationconfiguration-auditinghardware-security+7

753 years ago

Nmap-Cheat-Sheet

nu11secur1ty/nmap-cheat-sheet

curated-resourceseducationinformation-gathering+6

64 years ago

erl_mouse

m0usem0use/erl_mouse

python script to find vulnerable targets of CVE-2025-32433

exploitationinformation-gatheringnetwork-mapping+3

51 year ago

deadend

sibexico/deadend

Lightweight scriptable honeypot runner

defensive-toolseducationnetwork-security+2

13 months ago

Prober

isnic/prober

Automated, reproducible network security testing framework using Ansible and BATS to verify DNS, host availability, open ports, and TLS configuration…

configuration-auditingdns-analysisnetwork-security+3

15 years ago

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

cyberdudebivash/cyberdudebivash-fortisiem-cve-2025-64155-scanner

Authorized high-impact tool from CYBERDUDEBIVASH ECOSYSTEM to detect CVE-2025-64155 (FortiSIEM phMonitor Command Injection). Scans for open ports and…

command-and-controlexploitationpenetration-testing+3

17 months ago

Previous12 Next