Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
data-breach preview

data-breach

GitHubinfostealers-stats/data-breach

A continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…

curated-resourcesdata-exfiltrationinformation-gathering+3
66
1 day ago
InfoHound preview

InfoHound

GitHubfundacio-i2cat/infohound

InfoHound is an OSINT to extract a large amount of data given a web domain name.

dns-analysiseducationemail-harvesting+8
1632 years ago
CVE-2026-54121 preview

CVE-2026-54121

GitHubchpratik/cve-2026-54121

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

educationincident-responselog-analysis+4
123 days ago
richkit preview

richkit

GitHubaau-network-security/richkit

Domain Enrichment Toolkit $ pip install richkit

dns-analysisinformation-gatheringmachine-learning+2
115 years ago
CyberThreatIntel preview

CyberThreatIntel

GitHubstrangerealintel/cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

curated-resourcesdigital-forensicsmalware-analysis+3
7253 years ago
zdr preview

zdr

GitHubabubakarsiddik31/zdr
cloud-securitycurated-resourcesdata-exfiltration+3
264 months ago
osint-menace preview

osint-menace

GitHubawesom3alex/osint-menace
cryptographycurated-resourcesdns-analysis+5
91 month ago
coeus-ci preview

coeus-ci

GitHubopfour/coeus-ci

Competitive Intelligence from public data sources. Named after Coeus, the Greek Titan of the inquisitive mind.

curated-resourcesdns-analysiseducation+6
1 month ago
anteater preview
Archived

anteater

GitHubanteater/anteater

Anteater - CI/CD Gate Check Framework

code-analysisconfiguration-auditingdevsecops+6
1753 years ago
dnstwist preview

dnstwist

GitHubelceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns-analysisdns-subdomain-enumerationfuzzing+5
5.7k1 year ago
Loki preview

Loki

GitHubneo23x0/loki

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

digital-forensicsforensicshash-analysis+5
3.8k7 months ago
dnsmorph preview

dnsmorph

GitHubedoardogerosa/dnsmorph

Domain name permutation engine written in Go

dns-analysisinformation-gatheringosint+3
2663 years ago
HallWatch preview

HallWatch

GitHubzypherion-technologies/hallwatch

Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.

binary-analysisdefensive-toolsincident-response+2
882 months ago
DomainAlerting preview

DomainAlerting

GitHubpixelbubble/domainalerting

Daily alert when a new domain name is registered and contains your keywords

dns-subdomain-enumerationinformation-gatheringosint+1
1192 years ago
ail-typo-squatting preview

ail-typo-squatting

GitHubtyposquatter/ail-typo-squatting

Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.

dns-analysisinformation-gatheringosint+2
1081 year ago
sbomlyze preview

sbomlyze

GitHubrezmoss/sbomlyze

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

configuration-auditingdevsecopssecret-detection+5
2411 days ago
DepAlert preview

DepAlert

GitHubcybergabisoft/depalert

DepAlert is an open-source security gate for your CI/CD pipeline. It analyzes SBOMs against malware intelligence data and quickly tells you whether…

devsecopsmalware-analysissecret-detection+3
4 months ago
wafaray preview

wafaray

GitHubalt3kx/wafaray

Enhance your malware detection with WAF + YARA (WAFARAY)

defensive-toolslabs-practicemalware-analysis+4
1073 years ago
Previous12Next