Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

93 results

hassh

corelight/hassh

Fingerprint SSH clients and servers.

anomaly-detectionforensicsintrusion-detection+4

122 years ago

sherlock

sherlock-project/sherlock

Hunt down social media accounts by username across social networks

digital-forensicsforensicsinformation-gathering+7

89.9k19 days ago

sentrysearch

ssrajadh/sentrysearch

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

digital-forensicsforensicsinformation-gathering+3

4.4k29 days ago

PCredz

lgandx/pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

forensicsinformation-gatheringnetwork-security+3

2.5k5 months ago

LogHound

rnb-team/loghound

Post-Exploitation EVTX Analyzer for BloodHound Mapping

authenticationdigital-forensicsforensics+6

113 months ago

BaconSampler

logisek/baconsampler

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

dns-analysisforensicsinformation-gathering+6

207 months ago

operative-framework

graniet/operative-framework

operative framework is a rust investigation OSINT framework, you can interact with multiple targets, execute multiple modules, create links with…

forensicsinformation-gatheringosint+1

7481 year ago

CloudPentestCheatsheets

dafthack/cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloud-securitycurated-resourcesinformation-gathering+2

2.8k4 months ago

Invoke-ADEnum

leo4j/invoke-adenum

Automated Active Directory auditing and enumeration tool that generates detailed HTML audit reports with CSV/XLSX export, designed for security…

configuration-auditinginformation-gatheringpenetration-testing+2

5392 months ago

PowerTools

powershellempire/powertools

Collection of offensive PowerShell projects for reconnaissance, privilege escalation, and post-exploitation during penetration testing engagements.

penetration-testingpost-exploitationprivilege-escalation+1

2.2k9 years ago

pentest-ai-agents

0xsteph/pentest-ai-agents

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements,…

ai-securitycloud-securityeducation+8

2.1k4 days ago

WMD

thomastjdev/wmd

Python framework for IT security tools

exploit-frameworksinformation-gatheringpassword-cracking+8

2689 years ago

cornershot

zeronetworks/cornershot

Amplify network visibility from multiple POV of other hosts

information-gatheringnetwork-securitypenetration-testing+2

3112 years ago

fastfluxanalysis

staaldraad/fastfluxanalysis

Scripts to detect Fast-Flux and DGA using DNS query responses

dns-analysisnetwork-securityosint+2

459 years ago

Veil-PowerView

darkoperator/veil-powerview

PowerShell toolkit for Active Directory reconnaissance and network situational awareness, enabling domain enumeration, privilege escalation path…

information-gatheringpenetration-testingreconnaissance+1

7011 years ago

hackerone-reports

reddelexc/hackerone-reports

Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…

ctfcurated-resourceseducation+7

6.5k3 days ago

Bug-Bounty-Wordlists

ya551n3/bug-bounty-wordlists

Curated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.

curated-resourcesfuzzinginformation-gathering+3

6358 months ago

CTF-Web-Exploitation

arnavps/ctf-web-exploitation

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced…

container-securityctfeducation+8

14 months ago

Previous 1 2 345 6 Next