Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
226 results
geo-sleuth preview

geo-sleuth

GitHuboldcircle/geo-sleuth

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…

ai-securityinformation-gatheringosint+4
1.5k
1 day ago
cyclepatrol preview

cyclepatrol

GitHubbuybitart/cyclepatrol

Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports.

defensive-toolshash-analysisinformation-gathering+8
42 days ago
dddd preview

dddd

GitHubsleepingbag945/dddd

Batch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…

fingerprint-spoofinginformation-gatheringnetwork-mapping+9
1.9k2 years ago
cli preview

cli

GitHubvulncheck-oss/cli

VulnCheck's official command line tool

api-securitydns-analysisinformation-gathering+8
16018 days ago
connectors preview

connectors

GitHubopencti-platform/connectors

Collection of OpenCTI connectors that ingest and synchronize threat intelligence, IOCs, and CTI data from external sources like MISP and MITRE ATT&CK…

defensive-toolsincident-responseinformation-gathering+5
5852 days ago
go-exploit-cache preview

go-exploit-cache

GitHubvulncheck-oss/go-exploit-cache

A utility for producing an HTTP cache database to use with go-exploit

exploitationinformation-gatheringosint+6
98 months ago
Aliens_eye preview

Aliens_eye

GitHubarxhr007/aliens_eye

Hunt down 840+ social media accounts using AI

crawleremail-harvestinginformation-gathering+7
4.3k21 days ago
crawlee preview

crawlee

GitHubapify/crawlee

Node.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…

anti-botcrawlerfingerprint-spoofing+6
26.0k3 days ago
GoFileX preview

GoFileX

GitHubabraxas/gofilex

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

ctfinformation-gatheringpassword-attacks+5
1 month ago
ranwhat preview

ranwhat

GitHubmatijamiki/ranwhat

Flight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 9 more ran, and flags risky actions and leaked…

ai-securitydefensive-toolsidentity-management+7
13 days ago
caeruleus preview

caeruleus

GitHubpraetorian-inc/caeruleus

Single Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…

bluetooth-securityfuzzinghardware-iot-security+8
5610 days ago
RedditOSINT preview

RedditOSINT

GitHubalbertrg99/redditosint

Reddit OSINT by username. Discover indexed posts, comments, deleted and live content, activity patterns, exposed identifiers, and an overall exposure…

data-exfiltrationinformation-gatheringosint+7
45 days ago
enumerate-iam preview

enumerate-iam

GitHubandresriancho/enumerate-iam

Enumerate the permissions associated with AWS credential set

authentication-authorizationcloud-securityconfiguration-auditing+6
1.3k2 years ago
Random-Scripts preview

Random-Scripts

GitHubstar-sg/random-scripts

Collection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…

digital-forensicsforensicshash-analysis+5
23 years ago
spoonmap preview

spoonmap

GitHubtrustedsec/spoonmap

Python wrapper around masscan and nmap for large-scale port discovery, host discovery, banner grabbing, and NSE-based vulnerability scanning across…

defensive-toolsinformation-gatheringnetwork-mapping+7
2088 days ago
higernes preview

higernes

GitLabvqkro/higernes

a passive OSINT toolkit in python usernames, emails, domains, ips, phones, hashes. no keys, no logins.

dns-subdomain-enumerationemail-harvestinggeneral-purpose-utilities+9
6 days ago
aws-firmware-dump preview

aws-firmware-dump

GitHubradkawar/aws-firmware-dump

Acquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…

cloud-infrastructure-securitycloud-securitydata-recovery+5
157 days ago
CVE-2026-101894 preview

CVE-2026-101894

GitHubmurrez/cve-2026-101894

Python PoC for CVE-2026-101894: symlink-chain path traversal in @xhmikosr/decompress. Includes local Node lab, lockfile version scan, and mass…

exploitationinformation-gatheringpenetration-testing+6
11 days ago
Previous12…13Next