Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

556 results

web-check

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

dns-analysisemail-harvestinginformation-gathering+10

35.0k0 days ago

recon-ng

lanmaster53/recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

information-gatheringosintpenetration-testing+1

6.0k1 day ago

gods-eye-view

bilawalsidhu/gods-eye-view

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

general-purpose-utilitiesinformation-gatheringosint+1

47.5k1 day ago

RustHound-CE

g0h4n/rusthound-ce

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

information-gatheringpenetration-testingreconnaissance+1

6062 days ago

hijagger

firefart/hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

dns-analysisosintreconnaissance+3

3082 days ago

adPEAS

61106960/adpeas

Powershell tool to automate Active Directory enumeration.

authenticationexploitationinformation-gathering+6

1.4k2 days ago

cloud_enum

initstring/cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloud-securityinformation-gatheringosint+2

2.1k2 days ago

scilla

edoardottt/scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

dns-analysisdns-subdomain-enumerationinformation-gathering+4

1.3k4 days ago

whosthere

ramonvermeulen/whosthere

Local Area Network discovery tool with an interactive Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an…

dns-analysisinformation-gatheringnetwork-mapping+3

2.5k4 days ago

shodan-eye

bullseye0/shodan-eye

Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter.…

information-gatheringnetwork-securityosint+2

1.4k4 days ago

AgrusScanner

nybaywatch/agrusscanner

Windows network reconnaissance scanner with ping sweeps, TCP port scanning, and deep AI/ML service detection for finding shadow AI, rogue LLM…

ai-securitydefensive-toolsinformation-gathering+6

285 days ago

dicozorus

synacktiv/dicozorus

A tool to generate and maintain wordlists for Web fuzzing.

curated-resourcesfuzzinginformation-gathering+4

175 days ago

wappalyzer-next

s0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

crawlerinformation-gatheringreconnaissance+1

4205 days ago

pre2k

garrettfoster13/pre2k

A tool to query for the existence of pre-windows 2000 computer objects.

exploitationinformation-gatheringpassword-attacks+3

3976 days ago

zdns

zmap/zdns

Fast DNS Lookup Library and CLI Tool

dns-analysisinformation-gatheringnetwork-security+2

1.1k8 days ago

cdncheck

projectdiscovery/cdncheck

A utility to detect various technology for a given IP address.

cloud-securitydns-analysisinformation-gathering+3

9928 days ago

CVE-2026-93399

murrez/cve-2026-93399

Python PoC for CVE-2026-93399, an unauthenticated IDOR in Bookly <= 28.2 that leaks order tokens, exposes appointments, and rolls back bookings.

exploitationinformation-gatheringpenetration-testing+4

11 days ago

007-TheBond

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

dns-subdomain-enumerationeducationemail-harvesting+5

1.6k11 days ago

Previous12…31 Next