Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
230 results
tweets_analyzer preview

tweets_analyzer

GitHubx0rz/tweets_analyzer

OSINT tool that scrapes Twitter profile metadata to analyze activity patterns, timezone, language, geolocation, hashtags, and social connections for…

information-gatheringosintreconnaissance+1
3.0k
6 years ago
C2 preview

C2

GitHubet0x/c2

Methods of C2

command-and-controlpayload-developmentpayload-generation+3
2111 years ago
WMD preview

WMD

GitHubthomastjdev/wmd

Python framework for IT security tools

exploit-frameworksinformation-gatheringpassword-cracking+8
2689 years ago
MacroShop preview

MacroShop

GitHubkhr0x40sh/macroshop

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

payload-developmentpayload-generationpenetration-testing+2
40810 years ago
PhEmail preview

PhEmail

GitHubdionach/phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

email-harvestinginformation-gatheringosint+4
3496 years ago
SPF preview

SPF

GitHubtatanus/spf

SpeedPhishing Framework

information-gatheringosintpenetration-testing+3
4497 years ago
Loki.Rat preview

Loki.Rat

GitHubthegeekht/loki.rat

Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access…

command-and-controldata-exfiltrationlateral-movement+6
763 years ago
CVE-2023-38831-Exploit preview

CVE-2023-38831-Exploit

GitHubtechnicalcorp0/cve-2023-38831-exploit

This project contains a Python script that exploits **CVE-2023-38831**, a vulnerability in **WinRAR** versions prior to 6.23. The exploit generates a…

educationexploitationpayload-generation+4
11 year ago
Osintgram preview

Osintgram

GitHubdatalux/osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

educationemail-harvestinginformation-gathering+4
14.3k1 year ago
SoIG preview

SoIG

GitHubyezz123/soig

OSINT Tool gets a range of information from an Instagram account 🛠

information-gatheringosintreconnaissance+1
4192 months ago
twitter-intelligence preview

twitter-intelligence

GitHubbatuhaniskr/twitter-intelligence

Twitter Intelligence OSINT project performs tracking and analysis of the Twitter

crawlerdata-exfiltrationinformation-gathering+2
2405 years ago
Phisher-man preview

Phisher-man

GitHubfdx100/phisher-man

Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages made with flask

phishing-toolssocial-engineeringweb-security
1084 years ago
Twitter-Info preview

Twitter-Info

GitHubd4vinci/twitter-info

A simple python script to grab twitter account info just by username or profile link

information-gatheringosintosint-social-engineering+2
549 years ago
sack preview

sack

GitHubjofpin/sack

Identify connection of sessions for social engineering attacks.

educationinformation-gatheringosint-social-engineering+5
579 years ago
Stalker preview

Stalker

GitLabpxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

information-gatheringosintreconnaissance+1
76 years ago
CVE-2024-4367-POC-PDFJS preview

CVE-2024-4367-POC-PDFJS

GitHubelamani-drawing/cve-2024-4367-poc-pdfjs

PoC (Proof of Concept) de la CVE-2024-4367 - Vulnérabilité RCE dans libwebp. Démonstration complète incluant : création de payloads, scénarios…

data-exfiltrationeducationexploitation+4
11 year ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

crawlerdns-subdomain-enumerationemail-harvesting+8
37.3k1 day ago
theHarvester preview

theHarvester

GitHublaramies/theharvester

E-mails, subdomains and names Harvester - OSINT

dns-analysisdns-subdomain-enumerationemail-harvesting+9
17.3k4 days ago
Previous12…13Next