Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
57 results
super-xray preview
Archived

super-xray

GitHub4ra1n/super-xray

GUI launcher for the Xray vulnerability scanner with PoC search, subdomain scanning, rad integration, and reverse platform support for automated web…

exploitationpenetration-testingreverse-engineering+3
1.3k
3 years ago
nuclei preview

nuclei

GitHubprojectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21
30.8k1 day ago
hackbox preview

hackbox

GitHubsamhaxr/hackbox

Multi-function web security assessment tool combining XSS, SSRF, SQL injection testing, subdomain enumeration, Whois lookup, CORS and AWS S3…

information-gatheringmisconfigurationpenetration-testing+5
4183 years ago
rengine preview

rengine

GitHubyogeshojha/rengine

Automated web reconnaissance framework with configurable scan engines, subdomain discovery, port scanning, vulnerability detection, OSINT gathering,…

crawlerdns-subdomain-enumerationinformation-gathering+9
8.8k9 months ago
recon-skills preview

recon-skills

GitHubuphiago/recon-skills

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

cloud-securitycrawlerexploitation+9
1.2k1 day ago
FinalRecon preview

FinalRecon

GitHubthewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

crawlerdns-analysisinformation-gathering+7
3.0k2 months ago
vulnx preview

vulnx

GitHubanouarbensaad/vulnx

Automated CMS vulnerability scanner with intelligent shell injection, subdomain enumeration, port scanning, DNS analysis, and dork-based exploit…

crawlerdns-analysisexploit-frameworks+5
2.1k4 years ago
Oneliner-Bugbounty preview

Oneliner-Bugbounty

GitHubdaffainfo/oneliner-bugbounty

One-liner bug bounty workflows for recon, subdomain enumeration, endpoint extraction, and web vulnerability scanning using Nuclei, sqlmap, and CVE…

crawlercurated-resourcesinformation-gathering+6
1852 years ago
WEBFANG preview

WEBFANG

GitHubtalyx66/webfang

Modular OSINT and reconnaissance toolkit for ethical hackers. Performs passive intel gathering, active web spidering, DNS/WHOIS lookups, subdomain…

crawlerdns-analysisinformation-gathering+6
1171 month ago
bing-ip2hosts preview

bing-ip2hosts

GitHuburbanadventurer/bing-ip2hosts

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

crawlerinformation-gatheringosint+3
1424 years ago
r3con preview

r3con

GitHubthenurhabib/r3con

Multi-functional Web Recon & Vulnerability Scanner Tool

crawlerdns-analysisinformation-gathering+5
344 years ago
GETROBARB preview

GETROBARB

GitHubhackingteamoficial/getrobarb

Automated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline…

crawlerdns-analysisinformation-gathering+7
94 months ago
vajra preview
Archived

vajra

GitHubr3curs1v3-pr0xy/vajra

Automated web hacking framework for penetration testing with customizable target-scope scans, subdomain enumeration, port scanning, endpoint…

crawlerdns-subdomain-enumerationfuzzing+8
7034 years ago
kenzer preview
Archived

kenzer

GitHubarpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

crawlerdns-analysisinformation-gathering+8
2883 years ago
SiteBroker preview
Archived

SiteBroker

GitHubanon-exploiter/sitebroker

A cross-platform python based utility for information gathering and penetration testing automation!

crawlerdns-analysisinformation-gathering+5
4302 years ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

crawlerdns-subdomain-enumerationemail-harvesting+8
37.0k7h 22m ago
RED_HAWK preview

RED_HAWK

GitHubtuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

crawlerdns-analysisinformation-gathering+5
3.7k5 years ago
sif preview

sif

GitHubvmfunc/sif

the blazing-fast pentesting suite.

crawlerdns-analysisexploitation+7
6123 days ago
Previous1234Next