Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
279 results
tugarecon preview

tugarecon

GitHubskynet0x01/tugarecon

TugaRecon is an advanced subdomain reconnaissance and intelligence framework built for security researchers, penetration testers and OSINT…

osintreconnaissancevulnerability-analysis+4
220
4 months ago
ksubdomain preview

ksubdomain

GitHubboy-hack/ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

reconnaissanceinformation-gatheringpenetration-testing+2
1.2k4 months ago
getsubdomain preview

getsubdomain

GitHubabaykan/getsubdomain

Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl

reconnaissancedns-subdomain-enumerationinformation-gathering+1
84 years ago
Searpy preview

Searpy

GitHubj3ers3/searpy

🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找

osintreconnaissancedns-subdomain-enumeration+3
2143 years ago
Dome preview

Dome

GitHubv4d1/dome

Fast Python-based subdomain enumeration tool combining passive OSINT and active brute-force scanning with DNS wildcard detection, port scanning, and…

osintreconnaissanceport-scanning+3
5432 years ago
RedTeam_toolkit preview

RedTeam_toolkit

GitHubsignorrayan/redteam_toolkit

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

vulnerability-scannerspassword-attacksexploitation+5
5726 months ago
attack-surface-framework preview

attack-surface-framework

GitHubvmware-labs/attack-surface-framework

Tool to discover external and internal network attack surface

reconnaissancevulnerability-scannersnetwork-mapping+8
2062 years ago
warf preview

warf

GitHubiamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

osintreconnaissanceinformation-gathering+3
1944 years ago
puredns preview

puredns

GitHubd3mondev/puredns

High-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2.2k5 months ago
Subcert preview

Subcert

GitHuba3h1nt/subcert

Passive subdomain enumeration tool that extracts valid subdomains from certificate transparency logs using Python, ideal for reconnaissance and bug…

osintreconnaissancedns-subdomain-enumeration+2
795 years ago
PentestBro preview

PentestBro

GitHubmarius-rothenbuecher/pentestbro

Windows-based reconnaissance tool combining subdomain enumeration, port scanning, banner grabbing, whois lookups, and web path enumeration for…

reconnaissanceport-scanninginformation-gathering+3
605 years ago
NtHiM preview

NtHiM

GitHubthebinitghimire/nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

vulnerability-scannersdns-subdomain-enumerationweb-security+3
3874 years ago
rengine preview

rengine

GitHubyogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

osintreconnaissancevulnerability-scanners+9
8.8k9 months ago
OneForAll preview

OneForAll

GitHubshmilylty/oneforall

Multi-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…

osintreconnaissanceinformation-gathering+3
10.0k3 months ago
reconftw preview

reconftw

GitHubsix2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

osintreconnaissancevulnerability-scanners+7
8.0k1 month ago
bbot preview

bbot

GitHubblacklanternsecurity/bbot

The recursive internet scanner for hackers. 🧡

osintreconnaissancevulnerability-scanners+8
10.3k1 month ago
theHarvester preview

theHarvester

GitHublaramies/theharvester

E-mails, subdomains and names Harvester - OSINT

osintreconnaissancedns-subdomain-enumeration+6
17.0k12h 3m ago
assetfinder preview

assetfinder

GitHubtomnomnom/assetfinder

Find domains and subdomains related to a given domain

osintreconnaissancedns-subdomain-enumeration+2
3.7k6 years ago
Previous1…13141516Next