Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
34 results
datasploit preview

datasploit

GitHubdatasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

dns-subdomain-enumerationemail-harvestinginformation-gathering+6
3.3k
9 months ago
ReconDog preview

ReconDog

GitHubs0md3v/recondog

Reconnaissance Swiss Army Knife

dns-analysisinformation-gatheringosint+3
2.1k7 years ago
SubOver preview

SubOver

GitHubice3man543/subover

A Powerful Subdomain Takeover Tool

penetration-testingsubdomain-enumerationvulnerability-analysis+1
9697 years ago
ReconNote preview

ReconNote

GitHub0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

information-gatheringpenetration-testingreconnaissance+3
4115 years ago
wayBackLister preview

wayBackLister

GitHubanmolksachan/waybacklister

A New Approach to Directory Bruteforce with WaybackLister v1.0

information-gatheringmisconfigurationosint+3
2330 years ago
subgen preview

subgen

GitHubpry0cc/subgen

A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!

dns-subdomain-enumerationinformation-gatheringreconnaissance+1
856 years ago
nuubi preview

nuubi

GitHubpikpikcu/nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

dns-analysisinformation-gatheringosint+4
866 years ago
OTE preview
Archived

OTE

GitHub3nock/ote

OSINT Template Engine

information-gatheringosintreconnaissance+1
57913 days ago
Belati preview
Archived

Belati

GitHubaancw/belati

The Traditional Swiss Army Knife for OSINT

crawlerdns-analysiseducation+5
5665 years ago
emploleaks preview

emploleaks

GitHubinfobyte/emploleaks

An OSINT tool that helps detect members of a company with leaked credentials

data-exfiltrationemail-harvestinginformation-gathering+8
7873 months ago
Dome preview

Dome

GitHubv4d1/dome

Fast Python-based subdomain enumeration tool combining passive OSINT and active brute-force scanning with DNS wildcard detection, port scanning, and…

dns-analysisosintpenetration-testing+3
5452 years ago
phishlulz preview

phishlulz

GitHubantisnatchor/phishlulz
cloud-securitydata-exfiltrationinformation-gathering+4
3379 years ago
lazyrecon preview

lazyrecon

GitHubstorenth/lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

fuzzingosintpenetration-testing+4
1495 months ago
CertEagle preview

CertEagle

GitHubdevanshbatham/certeagle

Weaponizing Live CT logs for automated monitoring of assets

osintreconnaissancesubdomain-enumeration
1354 years ago
crtsh preview

crtsh

GitHubknqyf263/crtsh

API client for crt.sh

osintreconnaissancesubdomain-enumeration
415 years ago
Reverse_ip_Multithreading1 preview

Reverse_ip_Multithreading1

GitHubjenderal92/reverse_ip_multithreading1
osintreconnaissancesubdomain-enumeration
2 months ago
Previous12Next