Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
IG-Detective preview

IG-Detective

GitHubshredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

educationfingerprint-spoofingforensics+7
154
13 days ago
instaloader preview

instaloader

GitHubinstaloader/instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

crawlerdata-exfiltrationemail-harvesting+5
13.3k1 month ago
SoIG preview

SoIG

GitHubyezz123/soig

OSINT Tool gets a range of information from an Instagram account 🛠

information-gatheringosintreconnaissance+1
4122 months ago
InstagramMutualFollowerChecker preview

InstagramMutualFollowerChecker

GitHuboscarfromnz/instagrammutualfollowerchecker

Checks mutual followers between ig accounts (local hosted, use your own session id)

information-gatheringosintsocial-engineering+1
213 months ago
Lfi-Space preview

Lfi-Space

GitHubcapture0x/lfi-space

Automated Local File Inclusion (LFI) vulnerability scanner with Google Dork search and targeted URL scan modes for web application security testing.

information-gatheringpenetration-testingvulnerability-scanners+1
1124 months ago
XSS-LOADER preview

XSS-LOADER

GitHubcapture0x/xss-loader

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

payload-generationpenetration-testingwaf-bypass+2
6224 months ago
-CVE-2026-26215-manga-image-translator-RCE preview

-CVE-2026-26215-manga-image-translator-RCE

GitHubmbanyamer/-cve-2026-26215-manga-image-translator-rce

Proof-of-concept exploit for CVE-2026-26215, an unauthenticated remote code execution vulnerability in manga-image-translator via unsafe pickle…

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write preview

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

GitHubmbanyamer/cve-2021-41579-lcds-laquis-scada-4.3.1.1085-arbitrary-file-write

Proof-of-concept exploit for CVE-2021-41579 enabling arbitrary file write/read and RCE via malicious .els project file in LAquis SCADA ≤4.3.1.1085.

binary-exploitationexploitationpayload-generation+3
6 months ago
CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute preview

CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute

GitHubmbanyamer/cve-2026-25916-roundcube-webmail-dom-based-xss-exploit-via-svg-href-attribute

Python exploit for Roundcube Webmail DOM-based XSS (CVE-2026-25916) via SVG href attributes, enabling session hijacking and data exfiltration through…

email-securityexploitationpayload-generation+3
36 months ago
CVE-2026-25732-NiceGUI-3.6.1 preview

CVE-2026-25732-NiceGUI-3.6.1

GitHubmbanyamer/cve-2026-25732-nicegui-3.6.1

Exploit for CVE-2026-25732, a path traversal in NiceGUI's FileUpload that allows unauthenticated arbitrary file write. Includes usage examples for…

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
DoodleCloud preview

DoodleCloud

GitHubdepreciating/doodlecloud

Cloud Storage using Instagram.

cloud-securitydata-exfiltrationencryption-decryption-tools+3
1376 months ago
instagram-private-bypass preview

instagram-private-bypass

GitHubjatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…

authentication-authorizationeducationinformation-gathering+3
1747 months ago
terra preview

terra

GitHubxadhrit/terra

OSINT Tool on Twitter and Instagram.

email-harvestinginformation-gatheringosint+2
46210 months ago
Osintgram preview

Osintgram

GitHubdatalux/osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

educationemail-harvestinginformation-gathering+4
14.2k1 year ago
Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed preview

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

GitHubi12gocaj/instagram-notes-audio-leakage-via-url-extraction-fixed

Informe técnico de una vulnerabilidad ya corregida en Instagram Notes que exponía el audio original de vídeos mediante URLs directas.

educationinformation-gatheringpapers-research+2
81 year ago
Ultimate-Social-Scrapers preview

Ultimate-Social-Scrapers

GitHubharismuneer/ultimate-social-scrapers

🤖 Top-rated tools to scrape all major public sections from Facebook, Instagram, and Twitter (X) including posts (likes/comments), photos/videos,…

crawlerinformation-gatheringosint+2
3.2k1 year ago
INSTA_CYBER preview

INSTA_CYBER

GitHubsabir555s/insta_cyber

INSTA_CYBER is a Python-powered ethical hacking tool designed for educational and research purposes. Built by Muhammad Sabir Ali (INNO_CYBER), this…

authenticationpassword-attackspassword-cracking+3
141 year ago
SocialPwned preview
Archived

SocialPwned

GitHubmrtuxx/socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…

email-harvestinginformation-gatheringosint+5
1.3k1 year ago
Previous123Next