Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
358 results
howdy preview

howdy

GitHubboltgolt/howdy

🛡️ Windows Hello™ style facial authentication for Linux

authenticationidentity-access-managementprivacy+1
7.7k1 year ago
ProxyBroker preview

ProxyBroker

GitHubconstverum/proxybroker

Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS :performing_arts:

crawlerprivacy
4.2k7 years ago
numa preview

numa

GitHubrazvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

dns-analysisdns-fuzzingdns-subdomain-enumeration+3
1.4k7 days ago
vopono preview

vopono

GitHubjamesmcm/vopono

Run applications through VPN tunnels with temporary network namespaces

network-securityprivacyutilities-frameworks
1.3k3 days ago
fake-sms preview

fake-sms

GitHubnarasimha1997/fake-sms

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

general-purpose-utilitiesinformation-gatheringosint+1
2.8k3 years ago
fb-sleep-stats preview

fb-sleep-stats

GitHubsorenlouv/fb-sleep-stats

Use Facebook to track your friends’ sleeping habits

educationinformation-gatheringosint+1
1.7k8 years ago
autovpn preview

autovpn

GitHubttlequals0/autovpn

Create On Demand Disposable OpenVPN Endpoints on AWS.

cloud-securitygeneral-purpose-utilitiesprivacy
2.0k5 months ago
multitor preview

multitor

GitHubtrimstray/multitor

Create multiple TOR instances with a load-balancing.

network-securityosintpenetration-testing+2
1.2k1 year ago
flareprox preview

flareprox

GitHubmrturvey/flareprox

Use Cloudflare to create HTTP pass-through proxies for unique IP rotation, similar to fireprox

api-security-testinginformation-gatheringpenetration-testing+5
7969 months ago
Grid-Mobile preview

Grid-Mobile

GitHubrezivure/grid-mobile

Grid: Private Location Sharing mobile app for iOS/Android. E2EE with Matrix.

authentication-authorizationencryption-decryption-toolsmobile-security+2
54010 days ago
on-device-browser-agent preview

on-device-browser-agent

GitHubrunanywhereai/on-device-browser-agent

On-device AI browser automation using WebLLM. No cloud, no API keys, fully private.

ai-securitycrawlereducation+3
2999 days ago
xtrace-sdk preview

xtrace-sdk

GitHubxtraceai/xtrace-sdk

open source version xtrace sdk

ai-securityapi-securitycloud-security+5
9235 months ago
macchanger preview

macchanger

GitHubalobbs/macchanger

GNU MAC Changer

fingerprint-spoofingnetwork-securityprivacy
6995 years ago
kalitorify preview

kalitorify

GitHubbrainfucksec/kalitorify

Transparent proxy through Tor for Kali Linux OS

network-securityosintpenetration-testing+2
1.2k4 years ago
AndroidFaker preview

AndroidFaker

GitHubandroid1500/androidfaker

Android Faker a Simple Xposed Module Which Spoof Your Device IDs Values. Supporting Android 8.1+

android-securityfingerprint-spoofingimpersonation-tools+3
72411 months ago
TrashEmail preview

TrashEmail

GitHubrosehgal/trashemail

A hosted disposable email telegram bot; Extremely privacy friendly; Proudly hosted for community.

email-securityinformation-gatheringosint+1
5674 years ago
SpyPhone preview

SpyPhone

GitHubnst/spyphone

This project shows the kind of data a rogue iPhone application can collect.

educationinformation-gatheringios-security+3
3252 months ago
behave preview

behave

GitHubmindedsecurity/behave

Behave! A monitoring browser extension for pages acting as "bad boi"

defensive-toolsdns-analysisnetwork-security+3
3486 years ago
Previous1…151617…20Next