Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
28 results
AdvPhishing preview

AdvPhishing

GitHubignitetch/advphishing

This is Advance Phishing Tool ! OTP PHISHING

educationimpersonation-toolsinformation-gathering+3
3.3k9 months ago
Stalker preview

Stalker

GitLabpxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

information-gatheringosintreconnaissance+1
76 years ago
tweets_analyzer preview

tweets_analyzer

GitHubx0rz/tweets_analyzer

OSINT tool that scrapes Twitter profile metadata to analyze activity patterns, timezone, language, geolocation, hashtags, and social connections for…

information-gatheringosintreconnaissance+1
3.0k6 years ago
socialhunter preview
Archived

socialhunter

GitHubutkusen/socialhunter

crawls the website and finds broken social media links that can be hijacked

crawlerosintphishing-tools+3
7741 year ago
evilginx2 preview

evilginx2

GitHubkgretzky/evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

impersonation-toolspenetration-testingphishing+4
15.7k4 months ago
CS-Remote-OPs-BOF preview

CS-Remote-OPs-BOF

GitHubtrustedsec/cs-remote-ops-bof

Remote operations commands implemented using Beacon Object Files

authenticationencryption-decryption-toolslateral-movement+6
1.2k14 days ago
EvilnoVNC preview

EvilnoVNC

GitHubjoelgmsec/evilnovnc

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

information-gatheringpassword-crackingphishing+3
1.2k1 year ago
go-sherlock preview

go-sherlock

GitLabdrskelebones/go-sherlock

High-performance username search engine written in Go. Scans hundreds of social networks and websites to discover accounts associated with a given…

information-gatheringosintreconnaissance+2
4 years ago
zphisher preview

zphisher

GitHubhtr-tech/zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

educationimpersonation-toolsphishing+2
17.0k2 years ago
terra preview

terra

GitHubxadhrit/terra

OSINT Tool on Twitter and Instagram.

email-harvestinginformation-gatheringosint+2
46811 months ago
sudo-snooper preview

sudo-snooper

GitHubxorond/sudo-snooper

Python script that acts like the original sudo binary to fool users into entering their passwords

password-attackspenetration-testingphishing-tools+1
716 years ago
fb-phisher-python preview

fb-phisher-python

GitHubarjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

phishingphishing-toolssocial-engineering+1
177 years ago
TeleGram-Scraper preview
Archived

TeleGram-Scraper

GitHubth3unkn0n/telegram-scraper

telegram group scraper tool. fetch all information about group members

data-exfiltrationinformation-gatheringosint+3
1.7k5 years ago
telegram-osint-lib preview

telegram-osint-lib

GitHubpostuf/telegram-osint-lib

PHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…

information-gatheringosintreconnaissance+1
3212 years ago
noapi-google-search-mcp preview

noapi-google-search-mcp

GitHubvincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

anti-botcaptcha-bypasscrawler+8
1281 month ago
iKy preview

iKy

GitLabkennbroorg/iky

OSINT Project. Collect information from a mail. Gather. Profile. Timeline.

email-harvestinginformation-gatheringosint+2
1252 years ago
goCabrito preview

goCabrito

GitHubkingsabri/gocabrito

Super organized and flexible script for sending phishing campaigns

email-harvestingpenetration-testingphishing+3
554 years ago
BITB preview

BITB

GitHubmrd0x/bitb

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

impersonation-toolsphishingphishing-tools+2
2.9k4 years ago
Previous12Next