Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
217 results
TwLocation preview

TwLocation

GitHubmazenelzanaty/twlocation

Python script that gets Twitter users' tweets location

information-gatheringosintreconnaissance
1088 years ago
easyda preview

easyda

GitHubnccgroup/easyda

Easy Window domain access

lateral-movementpassword-attackspenetration-testing+1
5212 years ago
PSTools preview

PSTools

GitHubal1ex/pstools

PSTools

lateral-movementpenetration-testingpost-exploitation+3
36 years ago
ipscan preview

ipscan

GitHubangryip/ipscan

Angry IP Scanner - fast and friendly network scanner

information-gatheringnetwork-mappingport-scanning+1
5.1k16 days ago
r4ven preview

r4ven

GitHubspyboy-productions/r4ven

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

educationimpersonation-toolsinformation-gathering+4
1.5k8 months ago
reconspider preview

reconspider

GitHubbhavsec/reconspider

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

dns-analysisemail-harvestinginformation-gathering+5
2.8k5 years ago
CloudUnflare preview

CloudUnflare

GitHubgreycatz/cloudunflare

Reconnaissance Real IP address for Cloudflare Bypass

cloud-securitydns-analysisinformation-gathering+2
3706 years ago
unimap preview

unimap

GitHubedu4rdshl/unimap

Scan only once by IP address and reduce scan times with Nmap for large amounts of data.

information-gatheringnetwork-mappingport-scanning+2
4019 days ago
quasar preview

quasar

GitHubcyb0r9/quasar

Modular information gathering framework for penetration testers, featuring website analysis, email/phone lookup, credit card BIN checking, IP…

information-gatheringosintpenetration-testing+2
1667 years ago
SharpSniper preview

SharpSniper

GitHubhunniccyber/sharpsniper

Find specific users in active directory via their username and logon IP address

information-gatheringpenetration-testingreconnaissance+1
3856 years ago
Gotanda preview

Gotanda

GitHubhash1da1/gotanda

Browser extension for OSINT that searches threat intelligence and reconnaissance data from selected IOCs (IP, domain, URL, hash, SNS) via multiple…

information-gatheringosintreconnaissance+1
1944 years ago
OSINT-with-LLM preview

OSINT-with-LLM

GitHubmouna23/osint-with-llm

It’s an OSINT reconnaissance poc powered by Local LLMs (Ollama). You can feed it an email, domain, or IP, and it automatically performs multiple…

educationemail-harvestinginformation-gathering+3
8510 months ago
bing-ip2hosts preview

bing-ip2hosts

GitHuburbanadventurer/bing-ip2hosts

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

crawlerinformation-gatheringosint+3
1414 years ago
subdosec preview

subdosec

GitHubxcapri/subdosec

Fast, accurate subdomain takeover scanner with zero false positives. Detects vulnerable subdomains, collects metadata (IP, CNAME, title, status…

information-gatheringreconnaissancesubdomain-enumeration+2
6319 days ago
chaos preview

chaos

GitHubr57-labs/chaos

Origin IP scanning utility developed with ChatGPT

information-gatheringnetwork-mappingpenetration-testing+2
703 years ago
SeekYou preview

SeekYou

GitHubteycir/seekyou

OSINT intelligence on any IP, domain, or ASN

cloud-securitycrawlerdns-analysis+9
192 months ago
honeypot-auditor preview

honeypot-auditor

GitHubmziqudhd92/honeypot-auditor

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like a low-interaction honeypot — Shodan…

defensive-toolsinformation-gatheringnetwork-security+3
92 days ago
osint-menace preview

osint-menace

GitHubawesom3alex/osint-menace

Passive OSINT triage console for email, username, domain, IP, and crypto wallet reconnaissance. Features case management, curated resource links, and…

cryptographycurated-resourcesdns-analysis+5
92 months ago
Previous1…10111213Next