Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
279 results
Recon preview

Recon

GitHubdirsoooo/recon

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix…

osintreconnaissancevulnerability-scanners+6
222
4 years ago
tko-subs preview

tko-subs

GitHubanshumanbh/tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

vulnerability-analysispenetration-testingcloud-security+2
7765 years ago
Monitorizer preview

Monitorizer

GitHubbitthebyte/monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

reconnaissancedns-subdomain-enumerationinformation-gathering+1
2872 years ago
dnstake preview

dnstake

GitHubpwnesia/dnstake

Fast DNS takeover scanner that checks for missing hosted zones by querying nameservers and fingerprinting providers to identify vulnerable subdomains.

vulnerability-analysisinformation-gatheringsubdomain-enumeration+1
8564 years ago
SubDomainizer preview

SubDomainizer

GitHubnsonaniya2010/subdomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

osintinformation-gatheringcloud-security+2
1.9k10 days ago
Subrake preview

Subrake

GitHubhash3lizer/subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

reconnaissancevulnerability-scannersdns-subdomain-enumeration+4
3003 years ago
Reconky-Automated_Bash_Script preview

Reconky-Automated_Bash_Script

GitHubshivamrai2003/reconky-automated_bash_script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which…

osintreconnaissanceport-scanning+5
2043 years ago
karma_v2 preview

karma_v2

GitHubdheerajmadhukar/karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

osintreconnaissancevulnerability-analysis+4
1.0k2 years ago
PAVELOW preview

PAVELOW

GitHuboffxec/pavelow

PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess…

osintreconnaissancevulnerability-scanners+7
908 years ago
Kunyu preview

Kunyu

GitHubknownsec/kunyu

Kunyu, more efficient corporate asset collection

osintreconnaissancenetwork-mapping+5
1.1k1 year ago
haxunit preview

haxunit

GitHubbandit-haxunit/haxunit
reconnaissancevulnerability-scannersport-scanning+7
3321 year ago
Spartan preview

Spartan

GitHubmad-robot/spartan

Automated reconnaissance framework integrating subdomain enumeration, live host probing, port scanning, CMS detection, and directory brute-forcing…

reconnaissanceport-scanninginformation-gathering+3
1935 years ago
Reconator preview

Reconator

GitHubgokulapap/reconator

Automated Recon for Pentesting & Bug Bounty

osintreconnaissancevulnerability-scanners+6
4413 months ago
msprobe preview

msprobe

GitHubpuzzlepeaches/msprobe

Finding all things on-prem Microsoft for password spraying and enumeration.

osintreconnaissancepassword-attacks+2
2594 years ago
GooFuzz preview

GooFuzz

GitHubm3n0sd0n4ld/goofuzz

Bash-based fuzzing tool that leverages Google Dorking for stealthy enumeration of directories, files, subdomains, and parameters without direct…

osintreconnaissancedns-subdomain-enumeration+3
1.6k8 months ago
aiodnsbrute preview

aiodnsbrute

GitHubblark/aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

osintreconnaissancedns-subdomain-enumeration+3
6747 years ago
Recheck preview

Recheck

GitHubtegal1337/recheck

Deep scan domain and find all possible domain to takeover

reconnaissancevulnerability-analysisdns-subdomain-enumeration+1
173 years ago
waymore preview

waymore

GitHubxnl-h4ck3r/waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!

osintreconnaissanceinformation-gathering+3
2.7k2 months ago
Previous1…101112…16Next