Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
125 results
DNSint preview

DNSint

GitHubwho0xac/dnsint

Comprehensive DNS reconnaissance and OSINT toolkit for domain intelligence gathering. Queries all major record types, performs email security…

dns-analysisdns-fuzzingemail-security+7
19
9 months ago
Turbolist3r preview

Turbolist3r

GitHubfleetcaptain/turbolist3r

Subdomain enumeration tool with analysis features for discovered domains

dns-analysisinformation-gatheringosint+2
3989 months ago
FinalRecon preview

FinalRecon

GitHubthewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

crawlerdns-analysisinformation-gathering+7
3.0k2 months ago
Th3inspector preview

Th3inspector

GitHubmoham3driahi/th3inspector

Multi-purpose information gathering tool for OSINT, reconnaissance, and network analysis. Performs DNS lookups, port scanning, subdomain enumeration,…

dns-analysisinformation-gatheringosint+4
2.7k1 year ago
gasmask preview

gasmask

GitHubtwelvesec/gasmask

Modular OSINT reconnaissance tool integrating 20+ search engines, DNS analysis, WHOIS lookups, and Censys/Shodan APIs for domain, email, and…

dns-analysisemail-harvestinginformation-gathering+4
1.5k5 years ago
OneForAll preview

OneForAll

GitHubshmilylty/oneforall

Multi-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…

dns-analysisinformation-gatheringosint+3
10.0k3 months ago
reconftw preview

reconftw

GitHubsix2dez/reconftw

Automated reconnaissance tool that performs subdomain enumeration, vulnerability scanning, OSINT, port scanning, and web analysis to map attack…

cloud-securitydns-analysisdns-subdomain-enumeration+11
8.0k1 month ago
Kunyu preview

Kunyu

GitHubknownsec/kunyu

Cyberspace asset discovery and reconnaissance tool integrating ZoomEye and Seebug APIs for corporate asset collection, subdomain enumeration, SSL…

information-gatheringnetwork-mappingosint+5
1.1k1 year ago
jsubfinder preview

jsubfinder

GitHubthreatunknown/jsubfinder

Go-based tool that scans webpages and JavaScript files to discover hidden subdomains and secrets, with optional crawling and real-time proxy analysis…

information-gatheringosintreconnaissance+3
2831 year ago
ATEAM preview

ATEAM

GitHubnetspi/ateam

Python reconnaissance tool for discovering Azure services and attributing tenant ownership via DNS validation, multi-service probing, and response…

cloud-securitydns-analysisinformation-gathering+5
14911 months ago
Sudomy preview

Sudomy

GitHubscreetsec/sudomy

Fast subdomain enumeration and analysis framework with passive/active methods, DNS bruteforce, takeover detection, port scanning, and screenshot…

dns-analysisinformation-gatheringosint+5
2.4k2 years ago
BlackDir-Framework preview

BlackDir-Framework

GitHubjehadalqurashi/blackdir-framework

Multi-module web vulnerability scanner with directory enumeration, subdomain discovery, dork search, XSS/SQLi scanning, port scanning, WordPress…

encryption-decryption-toolshash-analysisinformation-gathering+5
1375 years ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.4k1 day ago
GhostTrack preview

GhostTrack

GitHubhunxbyts/ghosttrack

Useful tool to track location or mobile number

information-gatheringosintreconnaissance+1
14.9k2 years ago
subfinder preview

subfinder

GitHubprojectdiscovery/subfinder

Fast passive subdomain enumeration tool.

dns-analysisdns-fuzzingdns-subdomain-enumeration+9
14.3k3 days ago
web-check preview

web-check

GitHublissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

dns-analysisemail-harvestinginformation-gathering+10
34.6k14 days ago
KingOfBugBountyTips preview

KingOfBugBountyTips

GitHubkingofbugbounty/kingofbugbountytips

Curated bug bounty reconnaissance methodology with 400+ one-liners for subdomain enumeration, vulnerability scanning, API testing, and OSINT.…

curated-resourceseducationosint+5
5.5k1 month ago
NETworkManager preview

NETworkManager

GitHubborntoberoot/networkmanager

A powerful open-source tool for managing networks and troubleshooting network problems!

dns-analysisinformation-gatheringnetwork-mapping+8
8.7k5 days ago
Previous1234567Next