Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

116 results

phoneinfoga

sundowndev/phoneinfoga

Information gathering framework for phone numbers

email-harvestinginformation-gatheringosint+3

17.4k2 months ago

WhatsApp-OSINT

kinghacker0/whatsapp-osint

WhatsApp OSINT tool for retrieving profile photos, verifying Business accounts, checking user status, analyzing linked devices, and reviewing privacy…

information-gatheringmobile-securityosint+3

8861 year ago

GHunt

mxrch/ghunt

Async offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.

email-harvestinginformation-gatheringosint+4

19.3k6 months ago

maigret

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

crawlerdns-subdomain-enumerationemail-harvesting+8

36.5k3 days ago

tinfoleak

vaguileradiaz/tinfoleak

The most complete open-source tool for Twitter intelligence analysis

information-gatheringosintreconnaissance+1

2.0k8 years ago

theHarvester

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

dns-analysisdns-subdomain-enumerationemail-harvesting+9

17.0k12 days ago

GeoSentinel

h9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

crawlerdata-exfiltrationdns-subdomain-enumeration+7

1.1k1 month ago

holehe

megadose/holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten…

email-harvestinginformation-gatheringosint+2

12.0k2 years ago

007-TheBond

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

dns-subdomain-enumerationeducationemail-harvesting+5

1.5k6 days ago

blackbird

p1ngul1n0/blackbird

An OSINT tool to search for accounts by username and email in social networks.

email-harvestinginformation-gatheringosint+3

7.5k15 days ago

Archived

InstagramOSINT

sc1341/instagramosint

An Instagram Open Source Intelligence Tool - Archive

information-gatheringmobile-securityosint+3

1.6k2 years ago

tookie-osint

alfredredbird/tookie-osint

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

information-gatheringosintosint-social-engineering+2

2.8k6 days ago

Instagram-Crawler

hehpollon/instagram-crawler

Non API. Crawling post (photo, likes, comments, date ...) by username, hashtags

crawlerinformation-gatheringosint+1

865 years ago

OSINT-Framework

lockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

curated-resourcesdns-subdomain-enumerationeducation+8

11.9k10 days ago

Ultimate-Social-Scrapers

harismuneer/ultimate-social-scrapers

🤖 Top-rated tools to scrape all major public sections from Facebook, Instagram, and Twitter (X) including posts (likes/comments), photos/videos,…

crawlerinformation-gatheringosint+2

3.2k1 year ago

CamPhish

techchipnet/camphish

Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.

information-gatheringosintpenetration-testing+3

5.0k1 year ago

osi.ig

th3unkn0n/osi.ig

Information Gathering Instagram.

information-gatheringosintreconnaissance+1

1.5k4 years ago

EvilnoVNC

joelgmsec/evilnovnc

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

information-gatheringpassword-crackingphishing+3

1.2k1 year ago

Previous12 3 4 5 6 7 Next