Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
281 results
uddup preview

uddup

GitHubrotemreiss/uddup

Urls de-duplication tool for better recon.

information-gatheringreconnaissanceutilities-frameworks+1
1455 months ago
ntlmscout preview

ntlmscout

GitHubboydhacks/ntlmscout

Unauthenticated NTLM endpoint reconnaissance tool that decodes Type-2 challenges across HTTP, SMB, MSSQL, SMTP, IMAP, POP3, NNTP, LDAP, and RDP to…

authenticationdns-analysisinformation-gathering+8
5618 days ago
zenbuster preview

zenbuster

GitHub0xtas/zenbuster

Multi-threaded URL enumeration/content-discovery tool in Python.

ctfinformation-gatheringpenetration-testing+2
1082 years ago
NTLMRecon preview

NTLMRecon

GitHubpraetorian-inc/ntlmrecon

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

authenticationinformation-gatheringpenetration-testing+2
1166 months ago
SXDork preview

SXDork

GitHubsamhaxr/sxdork

A powerful tool that utilizes the technique of google dorking to search for specific information on the internet.

information-gatheringosintreconnaissance+2
1143 years ago
PentestBro preview

PentestBro

GitHubmarius-rothenbuecher/pentestbro

Windows-based reconnaissance tool combining subdomain enumeration, port scanning, banner grabbing, whois lookups, and web path enumeration for…

information-gatheringpenetration-testingport-scanning+3
605 years ago
RDWAtool preview

RDWAtool

GitHubp0dalirius/rdwatool

A python script to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

information-gatheringpassword-attacksreconnaissance+1
1229 months ago
WebFEET preview

WebFEET

GitHubnccgroup/webfeet

Web Filter External Enumeration Tool (WebFEET)

information-gatheringpenetration-testingreconnaissance+2
7812 years ago
Cooper preview

Cooper

GitHubchrismaddalena/cooper

A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.

information-gatheringphishingphishing-tools+2
603 months ago
PathFinder preview

PathFinder

GitHubhalildeniz/pathfinder

Python-based web reconnaissance tool that extracts site metadata, DNS records, subdomains, firewall names, technologies, and certificate details for…

information-gatheringosintreconnaissance+1
602 years ago
poc-cpanel-cve-2026-41940 preview

poc-cpanel-cve-2026-41940

GitHubxsanflip/poc-cpanel-cve-2026-41940

Multi-threaded security auditing tool that detects CVE-2026-41940, an authentication bypass in cPanel/WHM, using CRLF injection and dynamic port…

authenticationexploitationinformation-gathering+3
645 months ago
cspparse preview

cspparse

GitHublc/cspparse

A tool to evaluate Content Security Policies.

information-gatheringvulnerability-analysisweb-security
706 years ago
cirrusgo preview

cirrusgo

GitHubph33rr/cirrusgo

A fast tool to scan SAAS,PAAS App written in Go

cloud-securityinformation-gatheringvulnerability-scanners+1
864 years ago
Firebase-Extractor preview

Firebase-Extractor

GitHubviperbluff/firebase-extractor

A tool written in python for scraping firebase data

data-exfiltrationinformation-gatheringmobile-security+2
436 years ago
scscanner_sh preview

scscanner_sh

GitHubyuyudhn/scscanner_sh

scscanner is tool to read website status code response from the lists.

information-gatheringreconnaissancevulnerability-scanners+1
393 years ago
swarm preview

swarm

GitHuba7vinx/swarm

A modular distributed penetration testing tool.

crawlerinformation-gatheringpenetration-testing+4
419 years ago
Dumb0 preview

Dumb0

GitHub0verl0ad/dumb0

A simple tool to dump users in popular forums and CMS :)

information-gatheringosintpenetration-testing+1
318 years ago
JWTXposer preview

JWTXposer

GitHubchaudharyarjun/jwtxposer

An advanced JWT extraction & decoding tool for bug bounty hunters! 🏴‍☠️

information-gatheringosintreconnaissance+1
461 year ago
Previous1…567…16Next