Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
262 results
AISA-Scanner preview

AISA-Scanner

GitHubgmh5225/aisa-scanner

AISA-Scanner is an AI-powered autonomous vulnerability scanner that maps CVEs to metasploit exploits, MITRE, CEH, and SANS, delivering intelligent,…

ai-securityexploitationpenetration-testing+6
1
1 year ago
resolvers preview

resolvers

GitHubtrickest/resolvers

Curated, continuously validated list of reliable DNS resolvers for DNS enumeration, reconnaissance, and bug bounty workflows.

curated-resourcesdns-analysisdns-subdomain-enumeration+6
1.0k5 days ago
wordlists preview

wordlists

GitHubtrickest/wordlists

Real-world infosec wordlists, updated regularly

curated-resourcesinformation-gatheringpenetration-testing+3
1.8k4 days ago
proteus preview

proteus

GitHubpry0cc/proteus

A projectdiscovery driven attack surface monitoring bot powered by axiom

dns-analysisinformation-gatheringreconnaissance+3
1914 years ago
Bug-Bounty-Wordlists preview

Bug-Bounty-Wordlists

GitHubya551n3/bug-bounty-wordlists

Curated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.

curated-resourcesfuzzinginformation-gathering+3
6358 months ago
tactical-exploitation preview

tactical-exploitation

GitHub0xdea/tactical-exploitation

Modern tactical exploitation toolkit.

exploitationinformation-gatheringosint+8
86618 days ago
recon-ninja preview

recon-ninja

GitHubtess-ss/recon-ninja

Recon-Ninja

information-gatheringpenetration-testingreconnaissance+3
882 years ago
netscout preview

netscout

GitHubcaio-ishikawa/netscout

OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

crawlerdns-subdomain-enumerationinformation-gathering+3
1822 years ago
wayBackLister preview

wayBackLister

GitHubanmolksachan/waybacklister

A New Approach to Directory Bruteforce with WaybackLister v1.0

information-gatheringmisconfigurationosint+3
2330 years ago
bugbounty_tools preview

bugbounty_tools

GitHubdawgyg/bugbounty_tools

Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and…

information-gatheringreconnaissancesubdomain-enumeration+3
1528 months ago
AzureADEnumeration preview

AzureADEnumeration

GitHublogisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

cloud-infrastructure-securitycloud-securitydns-analysis+6
796 months ago
CF-Hero preview

CF-Hero

GitHubmusana/cf-hero

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

dns-analysisfingerprint-spoofinginformation-gathering+5
2.6k1 month ago
Shockwave-OSS preview

Shockwave-OSS

GitHubgal-nagli/shockwave-oss
curated-resourceseducationfuzzing+9
7502 years ago
censys-enumeration preview

censys-enumeration

GitHub0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

email-harvestinginformation-gatheringosint+2
1563 years ago
domains-from-csp preview

domains-from-csp

GitHub0xbharath/domains-from-csp

A script to extract domain names from Content Security Policy(CSP) headers

dns-analysisinformation-gatheringnetwork-mapping+5
1137 years ago
sslScrape preview

sslScrape

GitHubcheetz/sslscrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

information-gatheringnetwork-mappingreconnaissance+1
3415 years ago
Dnsplit preview

Dnsplit

GitHubk3ystr0k3r/dnsplit

Fast subdomain enumeration tool written in python.

dns-subdomain-enumerationinformation-gatheringpenetration-testing+2
57 months ago
Bluto-Old preview

Bluto-Old

GitHubdarryllane/bluto-old

Recon, Subdomain Bruting, Zone Transfers

dns-analysisdns-subdomain-enumerationemail-harvesting+4
23010 years ago
Previous12…15Next