Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

80 results

Archived

LinkedInt

vysecurity/linkedint

LinkedIn Recon Tool

email-harvestinginformation-gatheringosint+4

1.2k

3 years ago

thief_raccoon

davenisc/thief_raccoon

Educational phishing simulation tool that mimics OS login screens to capture credentials for cybersecurity awareness training. Supports Windows,…

educationphishingphishing-tools+2

1852 years ago

Stalker

pxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

information-gatheringosintreconnaissance+1

76 years ago

tweets_analyzer

x0rz/tweets_analyzer

OSINT tool that scrapes Twitter profile metadata to analyze activity patterns, timezone, language, geolocation, hashtags, and social connections for…

information-gatheringosintreconnaissance+1

3.0k6 years ago

WhatsApp-OSINT

kinghacker0/whatsapp-osint

WhatsApp OSINT tool for retrieving profile photos, verifying Business accounts, checking user status, analyzing linked devices, and reviewing privacy…

information-gatheringmobile-securityosint+3

90510 months ago

HiddenEyeReborn

d4rks3c-group/hiddeneyereborn

HiddenEye Reborn in better shape than ever, rewritten from scratch and adapted to modern world

information-gatheringosint-social-engineeringpenetration-testing+3

7581 year ago

raven

0x09al/raven

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

email-harvestinginformation-gatheringosint+3

7986 years ago

NetCrackPi

cisc0-gif/netcrackpi

RPi3+ Network Cracker Setup Tool

educationintrusion-detectionnetwork-security+5

45 years ago

maskphish

jaykali/maskphish

Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

educationphishingsocial-engineering

3.2k11 months ago

squarephish

secureworks/squarephish

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

authenticationimpersonation-toolsphishing+3

3463 years ago

Archived

lockphish

jaykali/lockphish

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…

information-gatheringmobile-securitypassword-attacks+3

9965 years ago

Archived

CVE-2010-1240

12345qwert123456/cve-2010-1240

Python tool for CVE-2010-1240 research - generates malicious PDFs exploiting Adobe Reader Launch Actions

educationexploitationpayload-generation+3

11 months ago

Archived

socialhunter

utkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked

crawlerosintphishing-tools+3

7751 year ago

Jasmin-Ransomware

codesiddhant/jasmin-ransomware

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to…

command-and-controlencryption-decryption-toolsexploitation+5

2875 years ago

fluxion

fluxionnetwork/fluxion

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…

penetration-testingphishingred-teaming+2

5.9k1 month ago

OSIF

0xlousie/osif

Facebook account information gathering tool that extracts sensitive personal data (residence, DOB, phone, email) even when target privacy is set to…

information-gatheringosintreconnaissance+1

1.2k7 years ago

Facad1ng

spyboy-productions/facad1ng

Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to…

defensive-toolseducationphishing+3

5147 months ago

Archived

twint

twintproject/twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…

crawlerdata-exfiltrationeducation+6

16.4k3 years ago

Previous 1 234 5 Next