Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
41 results
isf preview
Archived

isf

GitHubdark-lbp/isf

ISF(Industrial Control System Exploitation Framework),a exploitation framework based on Python

exploitationexploit-frameworksfuzzing+6
1.1k
2 years ago
subcrawl preview

subcrawl

GitHubhpthreatresearch/subcrawl

Modular framework for discovering and analyzing open directories on the web. Crawls URLs, extracts content, applies YARA/ClamAV scanning, and outputs…

crawlerinformation-gatheringosint+3
1513 years ago
Redeye preview

Redeye

GitHubredeye-framework/redeye

Collaborative pentest data management platform for organizing servers, users, vulnerabilities, attack vectors, and files with API access and graph…

information-gatheringpenetration-testingpenetration-testing-frameworks+2
4703 years ago
RTA preview

RTA

GitHubflipkart-incubator/rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
4153 years ago
Bluekeep-Hunter preview

Bluekeep-Hunter

GitHubravaan21/bluekeep-hunter

CVE-2019-0708, A tool which mass hunts for bluekeep vulnerability for exploitation.

exploitationexploit-frameworksnetwork-security+3
43 years ago
warf preview

warf

GitHubiamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

information-gatheringosintpenetration-testing+3
1934 years ago
ARTIF preview

ARTIF

GitHubcred-club/artif

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

information-gatheringintrusion-detectionioc-management+5
2484 years ago
tafferugli preview

tafferugli

GitHubsowdust/tafferugli

Web-based framework for filtering, collecting, and analyzing tweets to detect coordinated behavior, automated posting, and propaganda operations with…

information-gatheringosintsocial-engineering+1
3584 years ago
KaliIntelligenceSuite preview

KaliIntelligenceSuite

GitHubchopicalqui/kaliintelligencesuite

Automated intelligence-gathering framework that orchestrates Kali Linux tools and public APIs to collect, store, and analyze reconnaissance data for…

information-gatheringosintpenetration-testing+3
994 years ago
CVE-2020-0796 preview

CVE-2020-0796

GitHubjulixsalas/cve-2020-0796

Metasploit Auxiliary module for scanning and detecting CVE-2020-0796 (SMBGhost) vulnerability in Windows SMBv3 implementations.

exploitationexploit-frameworksnetwork-security+3
14 years ago
CVE-2021-44228_IoCs preview

CVE-2021-44228_IoCs

GitHubguardicode/cve-2021-44228_iocs

Curated collection of public Indicators of Compromise (IoCs) for the Log4j vulnerability (CVE-2021-44228), aggregated from multiple sources for…

information-gatheringioc-managementthreat-feeds-aggregators+2
4 years ago
vajra preview
Archived

vajra

GitHubr3curs1v3-pr0xy/vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

crawlerdns-subdomain-enumerationfuzzing+8
7014 years ago
TIGMINT preview

TIGMINT

GitHubtigmint/tigmint

Web-based OSINT framework for social media intelligence gathering, including Twitter and Instagram analysis, account discovery, and metadata…

information-gatheringosintosint-social-engineering+2
2675 years ago
Spartan preview

Spartan

GitHubmad-robot/spartan

Automated reconnaissance framework integrating subdomain enumeration, live host probing, port scanning, CMS detection, and directory brute-forcing…

information-gatheringpenetration-testingport-scanning+3
1915 years ago
ReconNote preview

ReconNote

GitHub0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

information-gatheringpenetration-testingreconnaissance+3
4095 years ago
BlackDir-Framework preview

BlackDir-Framework

GitHubjehadalqurashi/blackdir-framework

Web Application Vulnerability Scanner

encryption-decryption-toolshash-analysisinformation-gathering+5
1386 years ago
siemframework preview

siemframework

GitHubelevenpaths/siemframework

Modular Python3 attack framework for automating exploitation of SIEM platforms (Splunk, Graylog, OSSIM, QRadar, McAfee) via credential theft, payload…

exploit-frameworksinformation-gatheringnetwork-mapping+7
426 years ago
sdwan-harvester preview

sdwan-harvester

GitHubsdnewhop/sdwan-harvester

:globe_with_meridians: Automatically enumerate and fingerprint SD-WAN nodes on the internet

information-gatheringnetwork-mappingosint+4
496 years ago
Previous123Next