Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
38 results
SocialBox preview

SocialBox

GitHubcyb0r9/socialbox

Brute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…

information-gatheringpassword-attackssocial-engineering
2.0k7 years ago
otp-bot preview

otp-bot

GitHuboriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

authenticationimpersonation-toolspenetration-testing+3
3765 years ago
SMSOTPBOT preview

SMSOTPBOT

GitHubghost-otpbot/smsotpbot

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

impersonation-toolsinformation-gatheringpenetration-testing+3
2115 years ago
Tracgram preview

Tracgram

GitHubinitzercreations/tracgram

Use Instagram location features to track an account

information-gatheringosintreconnaissance+1
2353 years ago
instagram-private-bypass preview

instagram-private-bypass

GitHubjatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…

authentication-authorizationeducationinformation-gathering+3
1739 months ago
DoodleCloud preview

DoodleCloud

GitHubdepreciating/doodlecloud

Cloud Storage using Instagram.

cloud-securitydata-exfiltrationencryption-decryption-tools+3
1379 months ago
Insta-Crawler preview

Insta-Crawler

GitHubd4vinci/insta-crawler

A python script designed to generate a random instagram pictures ids and try it

information-gatheringosintprivacy+2
810 years ago
Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed preview

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

GitHubi12gocaj/instagram-notes-audio-leakage-via-url-extraction-fixed

Informe técnico de una vulnerabilidad ya corregida en Instagram Notes que exponía el audio original de vídeos mediante URLs directas.

educationinformation-gatheringpapers-research+2
81 year ago
Instagram-Brute-Force-2024 preview

Instagram-Brute-Force-2024

GitHub0x0mastermind0x0/instagram-brute-force-2024

Automated Instagram credential brute-forcing tool with CPU/GPU support, designed for password guessing attacks against target accounts using Chrome…

osint-social-engineeringpassword-attackssocial-engineering
81 year ago
InstagramOSINT preview
Archived

InstagramOSINT

GitHubsc1341/instagramosint

An Instagram Open Source Intelligence Tool - Archive

information-gatheringmobile-securityosint+3
1.6k2 years ago
XSS-LOADER preview

XSS-LOADER

GitHubcapture0x/xss-loader

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

payload-generationpenetration-testingwaf-bypass+2
6216 months ago
SMSBotBypass preview

SMSBotBypass

GitHubguallagang508/smsbotbypass

otp bot

authenticationimpersonation-toolsphishing-tools+1
5015 years ago
creepy preview

creepy

GitHubjkakavas/creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

information-gatheringosintreconnaissance+1
4277 years ago
Lfi-Space preview

Lfi-Space

GitHubcapture0x/lfi-space

Automated Local File Inclusion (LFI) vulnerability scanner with Google Dork search and targeted URL scan modes for web application security testing.

information-gatheringpenetration-testingvulnerability-scanners+1
1126 months ago
AllPhish preview

AllPhish

GitHubitsmehacker/allphish

A Complete Phishing Tool

educationphishingphishing-tools+1
406 years ago
InstagramMutualFollowerChecker preview

InstagramMutualFollowerChecker

GitHuboscarfromnz/instagrammutualfollowerchecker

Checks mutual followers between ig accounts (local hosted, use your own session id)

information-gatheringosintsocial-engineering+1
195 months ago
CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute preview

CVE-2026-25916-Roundcube-Webmail-DOM-based-XSS-Exploit-via-SVG-href-Attribute

GitHubmbanyamer/cve-2026-25916-roundcube-webmail-dom-based-xss-exploit-via-svg-href-attribute

Python exploit for Roundcube Webmail DOM-based XSS (CVE-2026-25916) via SVG href attributes, enabling session hijacking and data exfiltration through…

email-securityexploitationpayload-generation+3
38 months ago
-CVE-2026-26215-manga-image-translator-RCE preview

-CVE-2026-26215-manga-image-translator-RCE

GitHubmbanyamer/-cve-2026-26215-manga-image-translator-rce

Proof-of-concept exploit for CVE-2026-26215, an unauthenticated remote code execution vulnerability in manga-image-translator via unsafe pickle…

exploitationpayload-generationpenetration-testing+3
8 months ago
Previous123Next