Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

272 results

sniffnet

gyulyvgc/sniffnet

Comfortably monitor your network traffic 🕵️‍♂️

dns-analysisinformation-gatheringpacket-sniffing-analysis+1

40.5k20h 56m ago

chameleon

qeeqbox/chameleon

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3,…

defensive-toolsinformation-gatheringnetwork-security+1

8393 years ago

tsusen

stamparm/tsusen

Network traffic sensor

information-gatheringintrusion-detectionnetwork-security+1

11410 years ago

birdy-edwards

jeet-ganguly/birdy-edwards

Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…

ai-securitycrawlerinformation-gathering+3

971 month ago

AIP

stratosphereips/aip

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

information-gatheringintrusion-detectioniot-security+3

3220 days ago

Spip-Go

honeylabshq/spip-go

Spip network sensor written in Go

defensive-toolsincident-responseinformation-gathering+7

73 days ago

citrix-netscaler-cve-2026-88771-iocs

watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

command-and-controldefensive-toolsincident-response+5

27 days ago

Zeek-Endpoint-Enrichment

corelight/zeek-endpoint-enrichment

Zeek log enrichment tool that adds host information and known entity references to enhance network security monitoring and incident response.

information-gatheringlog-analysisnetwork-security+1

44 months ago

bleeding_onions

0xinf0/bleeding_onions

Script to find Exit and Guard nodes in the Tor Network, that are still suffering from CVE-2014-0160

information-gatheringnetwork-securityreconnaissance+2

612 years ago

exim-cve-2019-10149-data

cloudflare/exim-cve-2019-10149-data

Curated dataset of IPs, ASNs, and SMTP banners for Exim CVE-2019-10149, with linked advisories and threat actor intelligence for vulnerability…

curated-resourcesinformation-gatheringioc-management+3

32 years ago

HTTP-Basma

netomize/http-basma

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

command-and-controlinformation-gatheringmalware-analysis+6

3 months ago

ThreatSentry-AI

eclipsemanic/threatsentry-ai

ThreatSentry AI is an intelligent threat hunting dashboard that leverages machine learning to proactively identify and prioritize risks in your…

defensive-toolsincident-responseinformation-gathering+6

19 months ago

Log4j_Attacker_IPList

c3-h2/log4j_attacker_iplist

Curated list of attacker IP addresses targeting the Log4j vulnerability (CVE-2021-44228) for threat intelligence, incident response, and network…

information-gatheringioc-managementlog-analysis+2

4 years ago

wp-mhn

d0n601/wp-mhn

Integrates your Modern Honeypot Network Server and Wordpress Blog via MHN's REST API and WP's shortcodes

defensive-toolsinformation-gatheringintrusion-detection+4

9 years ago

VigilantOnion

andreyglauzer/vigilantonion

🐍 - Crawler on tor network sites, searching for keywords.

crawlerinformation-gatheringlog-analysis+4

1793 years ago

Archived

OnionIngestor

danieleperera/onioningestor

An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch

crawlerinformation-gatheringlog-analysis+4

3533 years ago

arkime

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

defensive-toolsdigital-forensicsforensics+7

7.4k17h 11m ago

Data-Shield_IPv4_Blocklist

duggytuxy/data-shield_ipv4_blocklist

Curated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…

defensive-toolsincident-responseinformation-gathering+5

62310h 48m ago

Previous12…16 Next