Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

279 results

AzSubEnum

yuyudhn/azsubenum

DNS-based subdomain enumeration tool for Azure services, probing App Services, Storage Accounts, Databases, Key Vaults, and CDN endpoints via…

reconnaissanceinformation-gatheringpenetration-testing+2

1 year ago

xsubfind3r

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

osintreconnaissancedns-subdomain-enumeration+2

1209 months ago

webcopilot

h4r5h1t/webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for…

reconnaissanceweb-vulnerability-scannersvulnerability-analysis+3

1.3k2 years ago

EasyEASM

g0ldencybersec/easyeasm

Zero-dollar attack surface management tool

reconnaissancevulnerability-analysisdns-subdomain-enumeration+7

3282 years ago

cloud

trickest/cloud

Monitoring the Cloud Landscape

osintreconnaissancevulnerability-analysis+5

941 day ago

zenbuster

0xtas/zenbuster

Multi-threaded URL enumeration/content-discovery tool in Python.

information-gatheringweb-securityctf+2

1072 years ago

Subhunter

umutcamliyurt/subhunter

Fast subdomain takeover scanner that checks DNS CNAME records against known fingerprints to detect vulnerable subdomains. Built in Go with…

vulnerability-scannersweb-securitypenetration-testing+1

883 months ago

sub.Monitor

e1abrador/sub.monitor

Self-hosted passive subdomain continous monitoring tool.

reconnaissanceinformation-gatheringsubdomain-enumeration

1722 years ago

subdosec

xcapri/subdosec

Fast, accurate subdomain takeover scanner with zero false positives. Detects vulnerable subdomains, collects metadata (IP, CNAME, title, status…

reconnaissancevulnerability-scannersinformation-gathering+2

642 months ago

frogy2.0

iamthefrogy/frogy2.0

Orbis is an full spectrum automated external attack surface intelligent toolkit.

osintreconnaissancevulnerability-scanners+9

3988 days ago

web-scanner

capture0x/web-scanner

Python-based web domain scanner integrating Sublist3r, Dirble, Nmap, and WhatWeb for subdomain discovery, directory enumeration, network scanning,…

reconnaissancevulnerability-scannersnetwork-mapping+3

233 months ago

chomtesh

mr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

osintpenetration-testing-frameworksreconnaissance+7

1345 months ago

Burp_Collector

sajibuu/burp_collector

A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.

api-security-testinginformation-gatheringweb-security+4

102 years ago

omnisci3nt

spyboy-productions/omnisci3nt

Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL…

osintreconnaissancevulnerability-scanners+6

3662 months ago

vortex

klezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

osintpassword-crackingphishing-tools+7

4504 years ago

second-order

mhmdiaa/second-order

Crawls web applications to detect second-order subdomain takeover vulnerabilities by collecting URLs and matching configurable rules for non-200…

reconnaissancevulnerability-scannersweb-security+2

4071 year ago

ghostbuster

assetnote/ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

reconnaissancevulnerability-scannerscloud-security+2

2781 year ago

subdomains.sh

enenumxela/subdomains.sh

A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.

reconnaissanceinformation-gatheringpenetration-testing+2

794 years ago

Previous 1…121314…16 Next