Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

59 results

naabu

projectdiscovery/naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…

information-gatheringnetwork-mappingpenetration-testing+3

6.2k

1 day ago

SteppingStones

nccgroup/steppingstones

Web-based red team activity logging, reporting, and situational awareness tool with Cobalt Strike and BloodHound integration.

command-and-controlinformation-gatheringpenetration-testing+3

2434 days ago

aardwolf

skelsec/aardwolf

Asynchronous RDP client for Python (headless)

authenticationinformation-gatheringlateral-movement+5

2389 days ago

wp2shell-vulnerability-scanner

adrees-basheer/wp2shell-vulnerability-scanner

Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across…

information-gatheringreconnaissancescripting-automation+3

1 month ago

dscanner

alan-baigorria/dscanner

Automated web reconnaissance tool consolidating dig, nmap, httpx, curl, and whois into a single scan for IP resolution, port discovery, technology…

dns-analysisinformation-gatheringnetwork-mapping+6

11 month ago

thrunt-god

backbay-labs/thrunt-god

Threat hunting command system for agentic IDEs

incident-responseinformation-gatheringintrusion-detection+5

361 month ago

URS

josephlai241/urs

Universal Reddit Scraper - A comprehensive Reddit scraping/archival command-line tool.

crawlerinformation-gatheringosint+1

1.0k1 month ago

caplets

bettercap/caplets

Scriptable MITM attack modules and automation caplets for the Bettercap framework, enabling network reconnaissance, traffic manipulation, and Wi-Fi…

exploitationinformation-gatheringnetwork-security+4

5231 month ago

Cortex

thehive-project/cortex

Automated observable analysis engine for threat intelligence, digital forensics, and incident response, integrating with diverse analyzers via a…

digital-forensicsincident-responseinformation-gathering+5

1.6k1 month ago

cygor

tjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7

882 months ago

AutoDirbuster

netspi/autodirbuster

Automatically run and save ffuf scans for multiple IPs

information-gatheringreconnaissancescripting-automation+2

822 months ago

DiffCatcher

teycir/diffcatcher

A Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…

code-analysisdevsecopsinformation-gathering+7

44 months ago

GETROBARB

hackingteamoficial/getrobarb

Automated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline…

crawlerdns-analysisinformation-gathering+7

94 months ago

burpflow

cappricio-securities/burpflow

CLI tool for automating HTTP request routing through Burp Suite proxy to load reconnaissance URLs and streamline web application security testing…

penetration-testingreconnaissancescripting-automation+2

105 months ago

SubMon

liuyc26/submon

Automated subdomain monitoring tool with scheduled scanning, Discord alerts, and a web dashboard. Uses subfinder, dnsx, and httpx to detect new and…

dns-analysisinformation-gatheringreconnaissance+3

15 months ago

CVE-2025-15467

mr-r3b00t/cve-2025-15467

PowerShell-based discovery tool for CVE-2025-15467, enabling automated vulnerability detection and exploitation assessment in target environments.

exploitationinformation-gatheringpenetration-testing+3

16 months ago

smb

hackingyseguridad/smb

Shell script collection for SMB protocol auditing, vulnerability detection (EternalBlue, SMBGhost), null session enumeration, credential brute-force,…

exploitationinformation-gatheringnetwork-security+5

7 months ago

gaia

oksuzkayra/gaia

Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.

ai-securitycrawlerinformation-gathering+7

467 months ago

Previous12 3 4 Next