Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
80 results
pi-hole preview

pi-hole

GitHubpi-hole/pi-hole

A black hole for Internet advertisements

dns-analysisnetwork-securityprivacy+1
60.5k1 month ago
wuzz preview

wuzz

GitHubasciimoo/wuzz

Interactive cli tool for HTTP inspection

general-purpose-utilitiesscripting-automationweb-proxies-interception
10.7k16 days ago
monty preview

monty

GitHubpydantic/monty

A minimal, secure Python interpreter written in Rust for use by AI

ai-securitycode-analysiseducation+2
8.1k1 day ago
ThreatCheck preview

ThreatCheck

GitHubrasta-mouse/threatcheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

binary-analysisdefensive-toolsmalware-analysis+1
1.6k5 months ago
nmap-nse-scripts preview

nmap-nse-scripts

GitHubcldrn/nmap-nse-scripts

My collection of nmap NSE scripts

curated-resourceseducationinformation-gathering+5
9944 years ago
pdtm preview

pdtm

GitHubprojectdiscovery/pdtm

ProjectDiscovery's Open Source Tool Manager

cloud-securitydevsecopsgeneral-purpose-utilities+3
1.1k5 days ago
bambdas preview

bambdas

GitHubportswigger/bambdas

Bambdas collection for Burp Suite Professional and Community.

curated-resourceseducationscripting-automation+3
5312 months ago
on-device-browser-agent preview

on-device-browser-agent

GitHubrunanywhereai/on-device-browser-agent

On-device AI browser automation using WebLLM. No cloud, no API keys, fully private.

ai-securitycrawlereducation+3
2991 day ago
ir-rescue preview

ir-rescue

GitHubdiogo-fernan/ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

digital-forensicsdisk-forensicsforensics+6
4885 years ago
LinuxCatScale preview

LinuxCatScale

GitHubwithsecurelabs/linuxcatscale

Incident Response collection and processing scripts with automated reporting scripts

digital-forensicsforensicsincident-response+2
3382 years ago
The_Shelf preview

The_Shelf

GitHubtrustedsec/the_shelf

Retired TrustedSec Capabilities

curated-resourcesexploitationpenetration-testing+2
2487 months ago
build.prop preview

build.prop

GitHubpixel-props/build.prop

Bash script to build your own system.prop

android-securityfirmware-analysismobile-security+1
28911 months ago
ConcoLLMic preview

ConcoLLMic

GitHubconcollmic/concollmic

LLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…

ai-securitybinary-analysiscode-analysis+8
1542 months ago
Kali-Setup preview

Kali-Setup

GitHubraikia/kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

penetration-testingscripting-automationutilities-frameworks
1895 years ago
Extractor preview

Extractor

GitHubnccgroup/extractor

Extension adds a new tab in Burp Suite called Extractor

encryption-decryption-toolspenetration-testingscripting-automation+3
417 years ago
kali-cloud preview

kali-cloud

GitLabkalilinux/build-scripts/kali-cloud

Scripts to build Kali cloud images (fork of https://salsa.debian.org/cloud-team/debian-cloud-images)

cloud-infrastructure-securitycloud-securityscripting-automation+2
324 months ago
ssh-chatter preview

ssh-chatter

GitHubgosuda/ssh-chatter

ssh-chat in modern c

ai-securityauthenticationctf+6
3310 days ago
anubis-fetch preview

anubis-fetch

GitHubfzakaria/anubis-fetch

Like curl, but it gets past Anubis and Cloudflare bot-walls.

anti-botfingerprint-spoofingscripting-automation+3
301 month ago
Previous12345Next