Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
41 results
killshot preview

killshot

GitHubbahaabdelwahed/killshot

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

exploit-frameworksfuzzinginformation-gathering+6
7808 months ago
Bheem preview
Archived

Bheem

GitHubharsh-bothra/bheem

Scope-based reconnaissance automation framework that orchestrates multiple open-source tools for subdomain enumeration, vulnerability scanning, and…

dns-analysisfuzzinginformation-gathering+5
3755 years ago
PAKURI preview

PAKURI

GitHub01rabbit/pakuri

Semi-automated penetration testing framework with TUI, integrating Nmap, OpenVAS, Metasploit, and Faraday for streamlined information gathering,…

educationexploit-frameworksinformation-gathering+3
1414 years ago
Nettacker preview

Nettacker

GitHubowasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

api-securityapi-security-testingdynamic-code-analysis+14
5.5k3 days ago
jok3r preview

jok3r

GitHubkoutto/jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

exploitationinformation-gatheringnetwork-security+6
1.1k7 years ago
fsociety preview

fsociety

GitHubmanisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

exploitationinformation-gatheringpassword-attacks+6
12.3k1 month ago
ivre preview

ivre

GitHubivre/ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…

dns-analysisinformation-gatheringnetwork-mapping+4
4.1k1 month ago
TIDoS-Framework preview

TIDoS-Framework

GitHub0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

exploitationfuzzinginformation-gathering+7
1.9k5 years ago
Mr.SIP preview

Mr.SIP

GitHubmeliht/mr.sip

SIP Security Assessment Framework for VoIP Pentesters. Presented at DEFCON, BlackHat & Offzone.

fuzzinginformation-gatheringpassword-cracking+2
43125 days ago
Nosql-Exploitation-Framework preview

Nosql-Exploitation-Framework

GitHubtorque59/nosql-exploitation-framework

A Python Framework For NoSQL Scanning and Exploitation

database-securityexploitationinformation-gathering+3
6048 years ago
ExtAnalysis preview

ExtAnalysis

GitHubtuhinshubhra/extanalysis

Browser Extension Analysis Framework - Scan, Analyze Chrome, firefox and Brave extensions for vulnerabilities and intels

information-gatheringosintreconnaissance+2
7516 months ago
ReconNote preview

ReconNote

GitHub0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

information-gatheringpenetration-testingreconnaissance+3
4115 years ago
XSS-Catcher preview

XSS-Catcher

GitHubdaxakahackerman/xss-catcher

A blind XSS detection and XSS data capture framework

information-gatheringpayload-generationpenetration-testing+4
1778 months ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubalt3kx/cve-2022-22965

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

exploitationinformation-gatheringpenetration-testing+3
1004 years ago
Crawlector preview

Crawlector

GitHubmfmokbel/crawlector

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

crawlerinformation-gatheringmalware-analysis+5
1238 months ago
cygor preview

cygor

GitHubtjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7
882 months ago
nullscan preview

nullscan

GitHubnoptrix/nullscan

A modular framework designed to chain and automate security tests.

exploitationinformation-gatheringnetwork-security+5
445 years ago
OllamaHound preview

OllamaHound

GitHub7h30th3r0n3/ollamahound

Mass reconnaissance, version fingerprinting, CVE tester and live exploitation framework for Ollama open instances.

command-and-controlexploitationinformation-gathering+6
626 months ago
Previous123Next