Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
kali-cloud preview

kali-cloud

GitLabkalilinux/build-scripts/kali-cloud

Scripts to build Kali cloud images (fork of https://salsa.debian.org/cloud-team/debian-cloud-images)

cloud-infrastructure-securitycloud-securityscripting-automation+2
32
4 months ago
cs-get-last-error preview

cs-get-last-error

GitHubhenkru/cs-get-last-error

An aggressor script for Cobalt Strike to query Windows' GetLastError messages

post-exploitationred-teamingutilities-frameworks
183 years ago
cowcloud preview

cowcloud

GitHubnccgroup/cowcloud
cloud-infrastructure-securitycloud-securitydevsecops+5
603 years ago
shh preview

shh

GitHubsynacktiv/shh

Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

cloud-infrastructure-securityconfiguration-auditingdefensive-tools+3
1773 months ago
kroxylicious-pqc-filter preview

kroxylicious-pqc-filter

GitHuboscerd/kroxylicious-pqc-filter

A Kroxylicious filter plugin that provides transparent post-quantum (ML-KEM + AES-256-GCM) record-level encryption for Apache Kafka, requiring zero…

cloud-infrastructure-securitycryptographyencryption-decryption-tools+1
3 months ago
GHunt preview

GHunt

GitHubmxrch/ghunt

Async offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.

email-harvestinginformation-gatheringosint+2
19.4k4 months ago
noapi-google-search-mcp preview

noapi-google-search-mcp

GitHubvincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

anti-botcaptcha-bypasscrawler+8
1224 days ago
kafel preview

kafel

GitHubgoogle/kafel

A language and library for specifying syscall filtering policies.

code-analysisstatic-analysisutilities-frameworks
3654 months ago
lssh preview

lssh

GitHubblacknon/lssh

A terminal-native remote access suite for SSH, cloud inventories, provider-backed connectors, parallel commands, mux workspaces, file transfer, and…

cloud-infrastructure-securitycloud-securitygeneral-purpose-utilities+4
3263 months ago
sslx preview

sslx

GitHubglincker/sslx

A fast, modern alternative to OpenSSL's CLI - inspect, grade, and manage certificates from the terminal

cryptographydevsecopsencryption-decryption-tools+3
101 day ago
Osint-Sync preview

Osint-Sync

GitHubmixaoc/osint-sync

Browser extension for OSINT research enabling username, email, and phone number searches across 20+ platforms with integrated access to GHunt,…

email-harvestinginformation-gatheringosint+5
598 months ago
searxng preview

searxng

GitHubsearxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…

crawlergeneral-purpose-utilitiesinformation-gathering+2
35.8k13h 58m ago
axiom preview

axiom

GitHubpry0cc/axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf,…

cloud-infrastructure-securitynetwork-securitypenetration-testing+4
4.4k1 year ago
colabcat preview

colabcat

GitHubsomeshkar/colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

cloud-securitypassword-attackspassword-cracking+1
7444 years ago
tsunami-security-scanner preview

tsunami-security-scanner

GitHubgoogle/tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high…

network-securitypenetration-testingutilities-frameworks+1
8.6k1 month ago
AutomatedLab preview

AutomatedLab

GitHubautomatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

cloud-infrastructure-securityeducationlabs-practice+1
2.2k1 month ago
protobuf-inspector preview

protobuf-inspector

GitHubmildsunrise/protobuf-inspector

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

binary-analysisreverse-engineeringutilities-frameworks
1.1k5 years ago
kit-oauth preview

kit-oauth

GitLabkit-lang/packages/kit-oauth

OAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…

api-securityauthenticationauthentication-authorization+1
1 month ago
Previous12Next