Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
655 results
shodanwave preview

shodanwave

GitHubjimywork/shodanwave

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

exploitationinformation-gatheringiot-security+5
2688 years ago
CredKing preview

CredKing

GitHubustayready/credking

Password spraying using AWS Lambda for IP rotation

authenticationcloud-securityidentity-access-management+3
6708 years ago
CredSniper preview

CredSniper

GitHubustayready/credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

authenticationimpersonation-toolsphishing+3
1.4k6 years ago
arp-validator preview

arp-validator

GitHubrnehra01/arp-validator

Security Tool to detect arp poisoning attacks

defensive-toolsintrusion-detectionnetwork-security+1
548 years ago
PasteZort preview

PasteZort

GitHubzettahack/pastezort

Pastejacking - PasteZort

impersonation-toolsphishing-toolssocial-engineering+1
8410 years ago
IP-Biter preview

IP-Biter

GitHubdamianofalcioni/ip-biter

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

email-securityinformation-gatheringosint+1
3272 years ago
CyberScan preview

CyberScan

GitHubmedbenali/cyberscan

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

information-gatheringnetwork-forensicsnetwork-mapping+3
4705 months ago
king-phisher preview

king-phisher

GitHubcrimsonforge-io/king-phisher

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

email-securityimpersonation-toolspenetration-testing+4
2.6k5 months ago
Crips preview

Crips

GitHubmanisso/crips

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

dns-analysisinformation-gatheringnetwork-mapping+2
5028 years ago
Just-Metadata preview

Just-Metadata

GitHubredsiege/just-metadata

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large…

information-gatheringosintreconnaissance+1
6327 years ago
ID-entify preview

ID-entify

GitHubbillyv4/id-entify

Search for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.

dns-analysisemail-harvestinginformation-gathering+4
1156 years ago
ipChecker preview

ipChecker

GitHubmthbernardes/ipchecker

Check if a IP is from tor or is a malicious proxy

information-gatheringnetwork-securityosint+1
568 years ago
TwLocation preview

TwLocation

GitHubmazenelzanaty/twlocation

Python script that gets Twitter users' tweets location

information-gatheringosintreconnaissance
1088 years ago
Goreport preview

Goreport

GitHubchrismaddalena/goreport

A Python script to collect campaign data from Gophish and generate a report

information-gatheringosintphishing+1
2023 years ago
Dumb0 preview

Dumb0

GitHub0verl0ad/dumb0

A simple tool to dump users in popular forums and CMS :)

information-gatheringosintpenetration-testing+1
318 years ago
HostileSubBruteforcer preview

HostileSubBruteforcer

GitHubnahamsec/hostilesubbruteforcer

Subdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…

cloud-securitydns-subdomain-enumerationinformation-gathering+3
4829 years ago
53R3N17Y preview

53R3N17Y

GitHubabaykan/53r3n17y

Python based script for Information Gathering.

dns-analysisinformation-gatheringosint+1
1059 months ago
eternal_check preview

eternal_check

GitHubpeterpt/eternal_check

Ip Vulnerability check to Eternal Blue , Romance , Synergy , Champion , Erraticgopher & Eagerlever

exploitationinformation-gatheringnetwork-security+1
1232 years ago
Previous1…272829…37Next