Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
279 results
censys-enumeration preview

censys-enumeration

GitHub0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

osintreconnaissanceinformation-gathering+2
156
3 years ago
domains-from-csp preview

domains-from-csp

GitHub0xbharath/domains-from-csp

A script to extract domain names from Content Security Policy(CSP) headers

osintreconnaissancenetwork-mapping+5
1137 years ago
sslScrape preview

sslScrape

GitHubcheetz/sslscrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

reconnaissancenetwork-mappinginformation-gathering+1
3415 years ago
Dnsplit preview

Dnsplit

GitHubk3ystr0k3r/dnsplit

Fast subdomain enumeration tool written in python.

reconnaissancedns-subdomain-enumerationinformation-gathering+2
57 months ago
Bluto-Old preview

Bluto-Old

GitHubdarryllane/bluto-old

Recon, Subdomain Bruting, Zone Transfers

osintreconnaissancedns-subdomain-enumeration+4
23010 years ago
crtsh preview

crtsh

GitHubknqyf263/crtsh

API client for crt.sh

osintreconnaissancesubdomain-enumeration
415 years ago
Reverse_ip_Multithreading1 preview

Reverse_ip_Multithreading1

GitHubjenderal92/reverse_ip_multithreading1
osintreconnaissancesubdomain-enumeration
2 months ago
iptodomain preview

iptodomain

GitHubjevalenciap/iptodomain

This tool extract domains from IP address based in the information saved in virustotal.

osintreconnaissancenetwork-mapping+2
803 years ago
All-ReverseIP-MultiThreading preview

All-ReverseIP-MultiThreading

GitHubjenderal92/all-reverseip-multithreading

python 2.7

osintreconnaissancenetwork-mapping+2
12 months ago
Subfindr preview

Subfindr

GitHubjenderal92/subfindr

Python 2.7

reconnaissancedns-subdomain-enumerationinformation-gathering+2
2 months ago
ghostrecon preview

ghostrecon

GitHubcappricio-securities/ghostrecon

gh0str3con is a All in one cloud based web Recon tool.

reconnaissancenetwork-mappingport-scanning+5
271 month ago
dump preview

dump

GitHubs0md3v/dump

Stuff that doesn't deserves its own repository.

osintreconnaissancevulnerability-scanners+6
3591 year ago
dnsx-action preview

dnsx-action

GitHubprojectdiscovery/dnsx-action

Fast and multi-purpose DNS toolkit allow to run multiple DNS queries.

reconnaissancenetwork-mappinginformation-gathering+3
154 years ago
subfinder-action preview

subfinder-action

GitHubprojectdiscovery/subfinder-action

Fast and passive subdomain enumeration.

osintreconnaissancedns-subdomain-enumeration+3
214 years ago
googlesub preview

googlesub

GitHubzombiesam/googlesub

This script will try to find a domains subdomains by using google dorking. It will never connect to the site it is researching.

osintreconnaissancedns-subdomain-enumeration+4
2010 years ago
alterx preview

alterx

GitHubprojectdiscovery/alterx

Fast and customizable subdomain wordlist generator using DSL

reconnaissancedns-subdomain-enumerationinformation-gathering+3
9896 months ago
tldfinder preview

tldfinder

GitHubprojectdiscovery/tldfinder

A streamlined tool for discovering private TLDs for security research.

reconnaissancenetwork-mappingdns-subdomain-enumeration+3
3266 months ago
urlfinder preview

urlfinder

GitHubprojectdiscovery/urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

osintreconnaissancedns-subdomain-enumeration+5
89715 days ago
Previous123…16Next