Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

125 results

Raccoon

evyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

dns-analysisfuzzinginformation-gathering+6

4.0k

4 months ago

HawkScan

c0dejump/hawkscan

Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

crawlerfuzzinginformation-gathering+5

4631 month ago

nuubi

pikpikcu/nuubi

Multi-purpose reconnaissance and information-gathering tool for penetration testers. Performs DNS lookups, subdomain enumeration, banner grabbing,…

dns-analysisinformation-gatheringosint+4

866 years ago

NETworkManager

borntoberoot/networkmanager

A powerful open-source tool for managing networks and troubleshooting network problems!

dns-analysisinformation-gatheringnetwork-mapping+8

8.7k5 days ago

harpoon

te-k/harpoon

CLI tool for open source and threat intelligence

dns-analysisemail-harvestinginformation-gathering+5

1.3k3 months ago

Th3inspector

moham3driahi/th3inspector

Multi-purpose information gathering tool for OSINT, reconnaissance, and network analysis. Performs DNS lookups, port scanning, subdomain enumeration,…

dns-analysisinformation-gatheringosint+4

2.7k1 year ago

subscraper

m8sec/subscraper

Subdomain and target enumeration tool built for offensive security testing

dns-analysisinformation-gatheringosint+3

9732 years ago

ATEAM

netspi/ateam

Python reconnaissance tool for discovering Azure services and attributing tenant ownership via DNS validation, multi-service probing, and response…

cloud-securitydns-analysisinformation-gathering+5

14911 months ago

waldo

red-team-labs/waldo

Multithreaded Python tool for brute-forcing hidden directories and subdomains on target web servers to aid in reconnaissance and information…

information-gatheringreconnaissancesubdomain-enumeration+1

549 years ago

RED_HAWK

tuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

crawlerdns-analysisinformation-gathering+5

3.7k5 years ago

bbscope

sw33tlie/bbscope

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

cloud-securitydatabase-securityinformation-gathering+6

1.4k1 month ago

ReconDog

s0md3v/recondog

Modular reconnaissance tool with wizard and CLI interfaces for subdomain enumeration, CMS detection, honeypot identification, port scanning, DNS…

dns-analysisinformation-gatheringosint+3

2.1k7 years ago

Kunyu

knownsec/kunyu

Cyberspace asset discovery and reconnaissance tool integrating ZoomEye and Seebug APIs for corporate asset collection, subdomain enumeration, SSL…

information-gatheringnetwork-mappingosint+5

1.1k1 year ago

cngo

0xsnowmn/cngo

Fast Golang Tool To Get Cname For Domains and Subdomain

dns-analysisinformation-gatheringnetwork-mapping+2

161 year ago

ODIN

chrismaddalena/odin

Automated network asset, email, and social media profile discovery and cataloguing.

cloud-securityemail-harvestinginformation-gathering+4

6667 years ago

SR-71

edu0x01/sr-71

An easy-to-use Python tool for performing subdomain enumeration, endpoint recognition, and more

dns-analysisemail-harvestinginformation-gathering+4

15 months ago

Lepus

gfek/lepus

Fast subdomain enumeration tool with multiple discovery modes (passive collectors, dictionary, permutations, reverse DNS, Markov chains), subdomain…

dns-analysisinformation-gatheringnetwork-mapping+5

3713 years ago

webcopilot

h4r5h1t/webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for…

information-gatheringpenetration-testingreconnaissance+3

1.3k2 years ago

Previous12 3 4 5 6 7 Next