Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
427 results
NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2- preview

NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2-

GitHubkaandemir993/nwh-stealer-analysis-fileless-bun-runtime-execution-clipboard-image-theft-cloud-c2-aws-r2-

Static analysis and payload extraction of NWH Stealer. Features deep dive into fileless execution via Bun JavaScript Runtime, in-memory clipboard…

binary-analysiscommand-and-controldata-exfiltration+7
10h 13m ago
darkfox preview

darkfox

GitHubaryanguenthner/darkfox

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

crawlerforensicsinformation-gathering+6
1901 month ago
TorBot preview

TorBot

GitHubdedsecinside/torbot

Crawls .onion sites over Tor to collect page titles, hostnames, and link relationships, exporting JSON trees and visualizations for dark web OSINT…

crawlerinformation-gatheringnetwork-mapping+5
5.1k3 days ago
VigilantOnion preview

VigilantOnion

GitHubandreyglauzer/vigilantonion

🐍 - Crawler on tor network sites, searching for keywords.

crawlerinformation-gatheringlog-analysis+4
1793 years ago
CVEngine preview

CVEngine

GitHubhevnsnt/cvengine

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

ai-securityemail-securityinformation-gathering+8
3723 days ago
dshield preview

dshield

GitHubdshield-isc/dshield

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

defensive-toolsincident-responseinformation-gathering+5
53624 days ago
rust-deobf preview

rust-deobf

GitHubvahpem/rust-deobf

Recover what obfuscation hides in Rust binaries (strings, crates, library functions, flattened control flow) via static analysis + Unicorn emulation,…

ai-assisted-reversingbinary-analysisdynamic-analysis-sandboxing+6
43 days ago
agenttriage-open-source preview

agenttriage-open-source

GitHubasngs/agenttriage-open-source

Cross-agent tracing and security-diagnosis system for tool-using LLM agents: normalizes trace events, builds provenance graphs, extracts…

ai-securityanomaly-detectioncode-analysis+6
2 months ago
ln-upgrade-dynamics preview

ln-upgrade-dynamics

GitHubbitcoindatalabs/ln-upgrade-dynamics

Code, aggregate data and LaTeX source for 'Who Patches the Lightning Network? Release Lines from Gossip, Node Platforms and Security Advisories,…

data-exfiltrationeducationnetwork-security+4
8 days ago
AI-Threat-Modeler preview

AI-Threat-Modeler

GitHubowasp/ai-threat-modeler

OWASP project for AI-assisted threat modeling, helping teams identify, analyze, and document security threats and mitigations in system designs.

ai-securitydefensive-toolspapers-research+2
19 days ago
certstream-server-rust preview

certstream-server-rust

GitHubreloading01/certstream-server-rust

High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…

cryptographydefensive-toolsinformation-gathering+5
501 day ago
taikotalent-phishing-iocs preview

taikotalent-phishing-iocs

GitHubeddyflores100-lang/taikotalent-phishing-iocs

IoCs, attack chain & detection for the taikotalent.xyz fake-Taiko-recruiter campaign delivering a self-deleting Bash trojan via the paste-in-terminal…

email-securityforensicsincident-response+5
14 days ago
malscore preview

malscore

GitHubraj3shp/malscore

Maliciousness scoring for Linux commands

anomaly-detectiondefensive-toolsincident-response+5
1410 days ago
veiled-eye preview

veiled-eye

GitHubemrekybs/veiled-eye

OSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.

curated-resourcesemail-harvestinginformation-gathering+6
6 days ago
cve-intel preview

cve-intel

GitHubfazmin/cve-intel

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust. Private…

ai-securitydevsecopsincident-response+8
1131 day ago
Mirage preview

Mirage

GitHubgmh5225/mirage

Microservice OSINT platform in Rust that automates intelligence collection, correlation, and visualization for threat intelligence and attack surface…

information-gatheringosintreconnaissance+2
11 year ago
DFIRHub preview

DFIRHub

GitHublascc/dfirhub

Search Windows forensic artifacts, see where each one lives on disk, and copy the KAPE command to collect it. Also builds collection scripts and…

curated-resourcesdigital-forensicsforensics+4
103 days ago
Hayabusa-Bulk-Runner preview

Hayabusa-Bulk-Runner

GitHubrorywag/hayabusa-bulk-runner

Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard

defensive-toolsdigital-forensicsforensics+5
182 days ago
Previous12…24Next