Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
62 results
metabigor preview

metabigor

GitHubj3ssie/metabigor

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
1.7k
2 months ago
slack-watchman preview

slack-watchman

GitHubpapermtn/slack-watchman

Slack enumeration and exposed secrets detection tool

defensive-toolsinformation-gatheringosint+3
4042 months ago
oORecon preview

oORecon

GitHubhilmiazizi/oorecon

Terminal UI for attack surface discovery: DNS recon, subdomain enumeration, port scanning, reverse IP, leaked login URLs, and JavaScript secret…

crawlerdns-analysisdns-subdomain-enumeration+8
81 month ago
gato preview
Archived

gato

GitHubpraetorian-inc/gato

GitHub Actions Pipeline Enumeration and Attack Tool

devsecopsexploitationinformation-gathering+7
96 months ago
azuredevops-enum preview

azuredevops-enum

GitHubreverseclabs/azuredevops-enum

Read-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…

api-securitycloud-securityconfiguration-auditing+7
28 months ago
kenzer preview
Archived

kenzer

GitHubarpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

crawlerdns-analysisinformation-gathering+8
2883 years ago
keeper preview

keeper

GitHubagberohq/keeper

Simple Secure Keeper for Secrets

authentication-authorizationcryptographyencryption-decryption-tools+1
1206 months ago
Photon preview

Photon

GitHubs0md3v/photon

Incredibly fast crawler designed for OSINT.

crawlerdns-subdomain-enumerationemail-harvesting+5
13.1k15 days ago
cariddi preview

cariddi

GitHubedoardottt/cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

crawlerinformation-gatheringosint+4
3.6k11 days ago
github-dorks preview

github-dorks

GitHubtechgaun/github-dorks

Find leaked secrets via github search

information-gatheringosintpenetration-testing+2
3.3k1 month ago
GitDorker preview

GitDorker

GitHubobheda12/gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

information-gatheringosintreconnaissance+2
2.6k5 years ago
SecretFinder preview

SecretFinder

GitHubm4ll0k/secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

information-gatheringosintsecret-detection+1
2.5k2 years ago
gitGraber preview

gitGraber

GitHubhisxo/gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…

information-gatheringosintsecret-detection+1
2.3k2 years ago
pwn_jenkins preview

pwn_jenkins

GitHubgquere/pwn_jenkins

Notes about attacking Jenkins servers

exploitationinformation-gatheringpassword-attacks+6
2.1k2 years ago
SubDomainizer preview

SubDomainizer

GitHubnsonaniya2010/subdomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

cloud-securityinformation-gatheringosint+2
1.9k1 month ago
GitMiner preview

GitMiner

GitHubunkl4b/gitminer

Tool for advanced mining for content on Github

information-gatheringosintreconnaissance+1
2.2k0 years ago
jsluice preview

jsluice

GitHubbishopfox/jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

code-analysisinformation-gatheringpenetration-testing+3
1.9k2 years ago
GitGot preview

GitGot

GitHubbishopfox/gitgot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

information-gatheringosintreconnaissance+1
1.6k2 years ago
Previous1234Next