Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

178 results

changedetection.io

dgtlmoon/changedetection.io

Best and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price…

crawlerinformation-gatheringosint+2

33.3k

20h 30m ago

TEx

guibacellar/tex

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

digital-forensicsforensicsinformation-gathering+2

3752 years ago

Feb2023-CVE-2021-21974-OSINT

n2x4/feb2023-cve-2021-21974-osint

OSINT tool for collecting and analyzing ransom demands from Shodan and Censys results, targeting CVE-2021-21974 with Bitcoin wallet and TOX ID…

cryptographyinformation-gatheringosint+3

23 years ago

Archived

StalkPhish

t4d/stalkphish

Open-source tool for harvesting and analyzing phishing kits to support threat intelligence, incident response, and phishing investigations.

forensicsincident-responseinformation-gathering+3

6692 years ago

harpoon

te-k/harpoon

CLI tool for open source and threat intelligence

dns-analysisemail-harvestinginformation-gathering+5

1.3k3 months ago

wtfis

pirxthepilot/wtfis

Passive hostname, domain and IP lookup tool for non-robots

dns-analysisinformation-gatheringosint+3

1.8k4 months ago

pDNS2

bez0r/pdns2

Passive DNS collector and query tool using Redis for fast historical DNS lookups, supporting domain, IP, TTL, and flux analysis from live interfaces…

dns-analysisinformation-gatheringthreat-intelligence

5912 years ago

flowsint

reconurge/flowsint

A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

information-gatheringosintreconnaissance+1

7.7k2 days ago

RedELK

outflanknl/redelk

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

defensive-toolsincident-responseinformation-gathering+4

2.7k9 months ago

Archived

SECMON

alb-uss/secmon

Automated infosec watching and vulnerability management tool with CVE polling, CPE-based matching, exploit search, RSS threat feed aggregation, and…

email-securityexploitationinformation-gathering+4

2684 years ago

Archived

melting-cobalt

splunk/melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

command-and-controlinformation-gatheringnetwork-security+3

1693 years ago

Search_CVE

k3ystr0k3r/search_cve

Simplified CVE search tool with intelligent algorithms for fast vulnerability lookup and analysis. Ideal for security researchers and threat intel.

information-gatheringreconnaissancethreat-intelligence+1

33 months ago

Phishruffus

jh00nbr/phishruffus

Intelligent threat hunter and phishing servers

dns-analysisinformation-gatheringphishing+2

477 years ago

Just-Metadata

redsiege/just-metadata

Passive IP intelligence framework that collects metadata from Shodan, VirusTotal, and WHOIS, then analyzes relationships between systems for threat…

information-gatheringosintreconnaissance+1

6337 years ago

SOC-Multitool

zdhenard42/soc-multitool

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

incident-responseinformation-gatheringosint+1

4201 year ago

edge

iknowjason/edge

Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

cloud-securitydns-analysisinformation-gathering+4

18810 months ago

gundog

jangeisbauer/gundog

PowerShell-based guided hunting tool for Microsoft 365 Defender that automates alert triage, entity enrichment, and IOC lookups across email and…

incident-responseinformation-gatheringlog-analysis+2

535 years ago

HTTP-Basma

netomize/http-basma

Active HTTP fingerprinting algorithm and tool that sends 8 crafted probes to generate unique, reversible server profiles for threat detection, server…

command-and-controlinformation-gatheringmalware-analysis+6

25 days ago

Previous12…10 Next