Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
851 results
killcast preview

killcast

GitHubthewhiteh4t/killcast

Manipulate Chromecast Devices in your Network

exploitationiot-securitynetwork-security+2
2616 years ago
adwsdomaindump preview

adwsdomaindump

GitHubmverschu/adwsdomaindump

Active Directory information dumper via ADWS for evasion purposes.

information-gatheringosintpenetration-testing+4
3191 month ago
gitls preview
Archived

gitls

GitHubhahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

information-gatheringosintpenetration-testing+2
561 year ago
Osintgram preview

Osintgram

GitHubdatalux/osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

educationemail-harvestinginformation-gathering+4
14.2k1 year ago
nomore403 preview

nomore403

GitHubdevploit/nomore403

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise.…

ids-ips-evasionpenetration-testingreconnaissance+3
1.8k2 months ago
HostHunter preview

HostHunter

GitHubspiderlabs/hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

dns-subdomain-enumerationinformation-gatheringnetwork-security+3
1.2k3 years ago
Admin-Scanner preview

Admin-Scanner

GitHubalienwhatever/admin-scanner

This tool is design to find admin panel of any website by using custom wordlist or default wordlist easily and allow you to find admin panel trough a…

information-gatheringpenetration-testingreconnaissance+1
1695 years ago
astsu preview

astsu

GitHubreddyyz/astsu

A network scanner tool, developed in Python 3 using scapy.

information-gatheringnetwork-mappingport-scanning+1
1406 months ago
InfoG preview

InfoG

GitHubtech-sec/infog

Multi-purpose OSINT tool for IP address lookup, DNS resolution, phone number details, and IP-grabbing via lure links for reconnaissance.

dns-analysisinformation-gatheringosint+1
385 years ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubshamo0/cve-2021-44228

log4shell (CVE-2021-44228) scanning tool

exploitationinformation-gatheringreconnaissance+3
44 years ago
getaltname preview

getaltname

GitHubfranccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
3901 month ago
Project-Deep-Focus preview

Project-Deep-Focus

GitHuby0oshi/project-deep-focus

Asynchronous network reconnaissance engine for large-scale service discovery and fingerprinting. Identifies unsecured services (RTSP cameras, VNC,…

information-gatheringiot-securitynetwork-mapping+6
2442 days ago
webpalm preview

webpalm

GitHubxorbit01/webpalm

Multi-threaded web crawler for structured site mapping and regex-based data extraction. Exports results in JSON, XML, or TXT for reconnaissance and…

crawlerinformation-gatheringosint+2
3811 year ago
XSpear preview
Archived

XSpear

GitHubhahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

dynamic-analysis-sandboxingfuzzinginformation-gathering+8
1.4k5 months ago
h2buster preview
Archived

h2buster

GitHub00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

information-gatheringpenetration-testingreconnaissance+3
376 years ago
InveighZero preview

InveighZero

GitHubkevin-robertson/inveighzero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

impersonation-toolsinformation-gatheringnetwork-security+3
8154 years ago
laravel-crypto-killer preview

laravel-crypto-killer

GitHubsynacktiv/laravel-crypto-killer

A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

encryption-decryption-toolsexploitationpayload-generation+2
1468 months ago
nacker preview

nacker

GitHubcarmaa/nacker

Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on…

network-access-controlnetwork-securitypenetration-testing+2
10411 years ago
Previous1…345…48Next