Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
GeoSentinel preview

GeoSentinel

GitHubh9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

crawlerdata-exfiltrationdns-subdomain-enumeration+7
1.1k
1 month ago
sharingan preview

sharingan

GitHubleobeosab/sharingan

Offensive Security recon tool

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
925 years ago
ipv4Bypass preview

ipv4Bypass

GitHubmilo2012/ipv4bypass

Using IPv6 to Bypass Security

ids-ips-evasionnetwork-securitypenetration-testing+2
931 year ago
Photon preview

Photon

GitHubs0md3v/photon

Incredibly fast crawler designed for OSINT.

crawlerdns-subdomain-enumerationemail-harvesting+5
13.3k1 month ago
scan4all preview

scan4all

GitHubghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dns-subdomain-enumerationexploit-frameworksfuzzing+9
6.2k2 years ago
waf-checker preview

waf-checker

GitHubpapamica/waf-checker

Tests your WAF with +160 payloads

api-security-testingdns-analysisids-ips-evasion+8
5616 months ago
netlas-cookbook preview

netlas-cookbook

GitHubnetlas-io/netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…

curated-resourcesdigital-forensicseducation+9
89021 days ago
PurplePanda preview

PurplePanda

GitHubcarlospolop/purplepanda

Identify privilege escalation paths within and across different clouds

cloud-securityinformation-gatheringpenetration-testing+3
7203 months ago
sandmap preview

sandmap

GitHubtrimstray/sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
1.9k1 year ago
BoxPwnr preview

BoxPwnr

GitHub0ca/boxpwnr

A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

ai-securityctfeducation+8
4602 months ago
telegram-osint-lib preview

telegram-osint-lib

GitHubpostuf/telegram-osint-lib

PHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…

information-gatheringosintreconnaissance+1
3212 years ago
weape preview

weape

GitHubcommonexploits/weape

Weape-Wireless-EAP-Extractor

information-gatheringnetwork-securitypenetration-testing+3
2913 years ago
dnsmap preview

dnsmap

GitHubmakefu/dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

dns-subdomain-enumerationinformation-gatheringpenetration-testing+1
1189 years ago
TJ-OSINT-Notebook preview

TJ-OSINT-Notebook

GitHubtjnull/tj-osint-notebook

This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations when it comes to performing…

curated-resourceseducationinformation-gathering+2
3732 years ago
killcast preview

killcast

GitHubthewhiteh4t/killcast

Manipulate Chromecast Devices in your Network

exploitationiot-securitynetwork-security+2
2646 years ago
Mega-Bot preview

Mega-Bot

GitHubaron-tn/mega-bot

[NEW] : Mega Bot ☣ Scanner & Auto Exploiter

exploitationinformation-gatheringosint+8
1656 years ago
hinge-command-control-c2 preview

hinge-command-control-c2

GitHubmatthewwiese/hinge-command-control-c2

A proof of concept demonstrating how to use the Hinge dating app as a C2.

command-and-controlosintpenetration-testing+3
119 months ago
vhosts-sieve preview

vhosts-sieve

GitHubdariusztytko/vhosts-sieve

Searching for virtual hosts among non-resolvable domains

information-gatheringpenetration-testingreconnaissance+2
896 years ago
Previous12Next