Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
124 results
writehat preview

writehat

GitHubblacklanternsecurity/writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

educationpenetration-testingutilities-frameworks
1.5k4 months ago
JSONPath preview

JSONPath

GitHubjsonpath-plus/jsonpath

A fork of JSONPath from http://goessner.net/articles/JsonPath/

code-analysisgeneral-purpose-utilitiesscripting-automation+2
1.2k8 hours ago
uac preview

uac

GitHubtclahr/uac

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

digital-forensicsforensicsincident-response+3
1.4k4 months ago
refinery preview

refinery

GitHubbinref/refinery

Composable command-line toolkit for malware triage and binary analysis: decode, decrypt, carve, and extract indicators from malicious files and…

binary-analysiscryptographyforensics+4
86814 days ago
nuclei-burp-plugin preview

nuclei-burp-plugin

GitHubprojectdiscovery/nuclei-burp-plugin

Burp Suite plugin for generating and executing Nuclei vulnerability templates directly from HTTP requests and responses, with YAML auto-complete and…

api-security-testingpenetration-testingutilities-frameworks+2
1.3k10 months ago
armory preview

armory

GitHubdepthsecurity/armory

Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related…

information-gatheringosintpenetration-testing+2
42728 days ago
wordlistctl preview

wordlistctl

GitHubblackarch/wordlistctl

Fetch, install and search wordlist archives from websites and torrent peers.

fuzzinginformation-gatheringpassword-cracking+1
5373 years ago
ioc-finder preview

ioc-finder

GitHubfhightower/ioc-finder

Python library for extracting Indicators of Compromise, URLs, IP addresses, hashes, and email addresses from text using declarative grammars instead…

ioc-managementmalware-analysisthreat-intelligence+1
18411 days ago
simvyn preview

simvyn

GitHubpranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

android-securitydatabase-securitydebuggers+9
35015 days ago
aerleon preview

aerleon

GitHubaerleon/aerleon

Generate firewall ACLs for Cisco, Juniper, Palo Alto, and more from a single YAML policy language via CLI or Python API.

configuration-auditingdevsecopsnetwork-security+1
26012h 35m ago
turbolite preview

turbolite

GitHubrussellromney/turbolite

SQLite VFS with sub-100ms cold JOIN queries from S3 + page-level compression and encryption

cloud-securitycryptographydatabase-security+2
4862 months ago
quokka preview

quokka

GitHubquarkslab/quokka

Exports disassembly from IDA Pro, Ghidra, and Binary Ninja into compact protobuf files for fast, standalone binary analysis and program manipulation…

binary-analysiscode-analysisreverse-engineering+2
22516 days ago
save-telegram-chat-history preview

save-telegram-chat-history

GitHubpigpagnet/save-telegram-chat-history

Browser extension to export Telegram chat history as text, including messages from deleted accounts, with configurable output and date formats.

information-gatheringosintutilities-frameworks
1695 years ago
keypair preview

keypair

GitHubjuliangruber/keypair

Generate a RSA PEM key pair from pure JS

authenticationcryptographyencryption-decryption-tools+2
2763 years ago
ulexecve preview

ulexecve

GitHubanvilsecure/ulexecve

Executes arbitrary ELF binaries directly from memory on Linux without touching disk, enabling stealthy red-teaming and anti-forensic operations via a…

exploitationmemory-forensicspenetration-testing+3
2152 years ago
galer preview

galer

GitHubdwisiswant0/galer

A fast tool to fetch URLs from HTML attributes by crawl-in.

crawlerinformation-gatheringutilities-frameworks+1
2631 year ago
lst2x64dbg preview

lst2x64dbg

GitHubutkonos/lst2x64dbg

Extract labels from IDA, Ghidra, Binary Ninja, and Relyze files and export x64dbg database. Including radare2 main address.

binary-analysisdebuggersreverse-engineering+1
1142 years ago
xioc preview

xioc

GitHubassafmo/xioc

Extract indicators of compromise from text, including "escaped" ones.

forensicsinformation-gatheringioc-management+3
1636 years ago
Previous1234567Next