Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1735 results
Git-Secret preview
Archived

Git-Secret

GitHubdaffainfo/git-secret

Go scripts for finding sensitive data like API key / some keywords in the github repository

code-analysisinformation-gatheringosint+3
158
4 years ago
pathprober preview
Archived

pathprober

GitHubxchopath/pathprober

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

information-gatheringpenetration-testingreconnaissance+3
475 years ago
EmailFinder preview
Archived

EmailFinder

GitHubjosue87/emailfinder

Search emails from a domain through search engines

crawleremail-harvestinginformation-gathering+2
4253 years ago
3klCon preview
Archived

3klCon

GitHubeslam3kl/3klcon

Automation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated files.

information-gatheringpenetration-testingport-scanning+3
6892 years ago
SharpHound3 preview
Archived

SharpHound3

GitHubbloodhoundad/sharphound3

C# Data Collector for the BloodHound Project, Version 3

information-gatheringosintpenetration-testing+2
5564 years ago
gitls preview
Archived

gitls

GitHubhahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

information-gatheringosintpenetration-testing+2
561 year ago
kenzer preview
Archived

kenzer

GitHubarpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

crawlerdns-analysisinformation-gathering+8
2883 years ago
Bheem preview
Archived

Bheem

GitHubharsh-bothra/bheem
dns-analysisfuzzinginformation-gathering+5
3755 years ago
Gxss preview
Archived

Gxss

GitHubkathanp19/gxss

A tool to check a bunch of URLs that contain reflecting params.

information-gatheringpenetration-testingreconnaissance+2
6032 years ago
LAST preview
Archived

LAST

GitHubdewolfrobin/last

Linux Automated Security scanning Tool

information-gatheringnetwork-mappingpenetration-testing+5
107 years ago
dnsprobe preview
Archived

dnsprobe

GitHubprojectdiscovery/dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

dns-analysisinformation-gatheringnetwork-mapping+3
2855 years ago
SEcraper preview
Archived

SEcraper

GitHubzerobyte-id/secraper

Search engine scraper tool with BASH script.

crawlerinformation-gatheringosint+2
836 years ago
TeleGram-Scraper preview
Archived

TeleGram-Scraper

GitHubth3unkn0n/telegram-scraper

telegram group scraper tool. fetch all information about group members

data-exfiltrationinformation-gatheringosint+3
1.7k5 years ago
thethe preview
Archived

thethe

GitHubelevenpaths/thethe

thethe

incident-responseinformation-gatheringlog-analysis+4
1155 years ago
threat_note preview
Archived

threat_note

GitHubdefensepointsecurity/threat_note

DPS' Lightweight Investigation Notebook

incident-responseinformation-gatheringioc-management+3
4352 years ago
cloud-buster preview
Archived

cloud-buster

GitHubsagehack/cloud-buster

A Cloudflare resolver that works

dns-analysisinformation-gatheringmisconfiguration+5
1467 years ago
goop preview
Archived

goop

GitHubs0md3v/goop

Google Search Scraper

captcha-bypasscrawlerinformation-gathering+3
5707 years ago
h2buster preview
Archived

h2buster

GitHub00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

information-gatheringpenetration-testingreconnaissance+3
376 years ago
Previous1…94959697Next