Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
64 results
mihari preview

mihari

GitHubninoseki/mihari

A query aggregator for OSINT based threat hunting

information-gatheringosintreconnaissance+2
9433 months ago
ThreatHunting preview

ThreatHunting

GitHubolafhartong/threathunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

educationincident-responseinformation-gathering+2
1.2k3 years ago
ThreatIngestor preview

ThreatIngestor

GitHubpedramamini/threatingestor

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

information-gatheringintrusion-detectionioc-management+3
9304 months ago
TekDefense-Automater preview

TekDefense-Automater

GitHub1an0rmus/tekdefense-automater

Automater - IP URL and MD5 OSINT Analysis

hash-analysisinformation-gatheringosint+1
5572 years ago
voidaccess preview

voidaccess

GitHubkatrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

crawlerdata-exfiltrationencryption-decryption-tools+8
7471 month ago
ATTACKdatamap preview

ATTACKdatamap

GitHubolafhartong/attackdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

educationinformation-gatheringthreat-feeds-aggregators+2
3575 years ago
darknet-mcp-server preview

darknet-mcp-server

GitHubbadchars/darknet-mcp-server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit…

ai-securitydata-exfiltrationinformation-gathering+8
4619 days ago
machinae preview

machinae

GitHubhurricanelabs/machinae

Automated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…

information-gatheringosintthreat-feeds-aggregators+1
5374 months ago
ThreatIntelligenceDiscordBot preview

ThreatIntelligenceDiscordBot

GitHubvxunderground/threatintelligencediscordbot

Gets updates from various clearnet domains and ransomware threat actor domains

information-gatheringosintthreat-feeds-aggregators+1
4382 years ago
iocextract preview

iocextract

GitHubpedramamini/iocextract

Defanged Indicator of Compromise (IOC) Extractor.

digital-forensicsforensicsinformation-gathering+5
5842 years ago
malicious_extension_sentry preview

malicious_extension_sentry

GitHubtoborrm9/malicious_extension_sentry

Malicious Extension Database

curated-resourcesdefensive-toolseducation+6
20718h 53m ago
threatresearch preview

threatresearch

GitHubemergingthreats/threatresearch

Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation

information-gatheringioc-managementosint+3
894 months ago
OSweep preview

OSweep

GitHubecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

dns-subdomain-enumerationinformation-gatheringmalware-analysis+4
3197 years ago
NVD-Database preview

NVD-Database

GitHubnomi-sec/nvd-database

📕NVD Database

curated-resourcesinformation-gatheringioc-management+3
1196 days ago
Sandbox_Scryer preview

Sandbox_Scryer

GitHubpayloadsecurity/sandbox_scryer

Parses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…

dynamic-analysis-sandboxingeducationinformation-gathering+6
2284 years ago
ThreatKB preview

ThreatKB

GitHubinquest/threatkb

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

information-gatheringioc-managementmalware-analysis+2
1046 months ago
ARTIF preview

ARTIF

GitHubcred-club/artif

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

information-gatheringintrusion-detectionioc-management+5
2514 years ago
PatrowlHears preview

PatrowlHears

GitHubpatrowl/patrowlhears

PatrowlHears - Vulnerability Intelligence Center / Exploits

defensive-toolsexploitationinformation-gathering+3
1671 year ago
Previous1234Next