Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
18 results
MetaFinder preview
Archived

MetaFinder

GitHubjosue87/metafinder

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

crawlerdns-subdomain-enumerationinformation-gathering+2
221
2 years ago
BinGoo preview

BinGoo

GitHubhood3drob1n/bingoo

BinGoo! A Linux bash based Bing and Google Dorking Tool

dns-subdomain-enumerationinformation-gatheringosint+5
24014 years ago
kostebek preview

kostebek

GitHubesecuritylab/kostebek

Automated reconnaissance tool that discovers organization domains by querying trademark databases via Google, Bing, Yahoo, and trademark registries.

information-gatheringosintreconnaissance+1
896 years ago
Firebase-Extractor preview

Firebase-Extractor

GitHubviperbluff/firebase-extractor

A tool written in python for scraping firebase data

data-exfiltrationinformation-gatheringmobile-security+2
436 years ago
RastLeak preview

RastLeak

GitHubn4xh4ck5/rastleak

Tool to automatic leak information using Hacking with engine searches

data-exfiltrationinformation-gatheringosint+1
918 years ago
goodoldsearch-oss preview

goodoldsearch-oss

GitHubmrtdlgc/goodoldsearch-oss

Local static query builder for precise search across web engines, Shodan, crt.sh, and Wayback Machine. Supports Google dorks, filetype filters, date…

curated-resourcesdns-subdomain-enumerationeducation+6
204 months ago
Big-Ass-Data-Broker-Opt-Out-List preview

Big-Ass-Data-Broker-Opt-Out-List

GitHubyaelwrites/big-ass-data-broker-opt-out-list

Curated, community-maintained directory of data broker opt-out instructions to help individuals remove personal information from people-search sites…

curated-resourceseducationinformation-gathering+3
6.9k12 days ago
sitedorks preview

sitedorks

GitHubzarcolio/sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

dns-subdomain-enumerationinformation-gatheringosint+3
1.1k1 day ago
searxng preview

searxng

GitHubsearxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…

crawlergeneral-purpose-utilitiesinformation-gathering+2
38.2k12h 45m ago
PowerMeta preview

PowerMeta

GitHubdafthack/powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing…

information-gatheringosintreconnaissance
5861 year ago
go-dork preview

go-dork

GitHubdwisiswant0/go-dork

The fastest dork scanner written in Go.

crawlerdns-subdomain-enumerationinformation-gathering+2
1.3k2 years ago
Searpy preview

Searpy

GitHubj3ers3/searpy

🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找

dns-subdomain-enumerationinformation-gatheringosint+3
2133 years ago
bing-ip2hosts preview

bing-ip2hosts

GitHuburbanadventurer/bing-ip2hosts

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

crawlerinformation-gatheringosint+3
1415 years ago
falla preview

falla

GitHubsanix-darker/falla

A search-engine-cli-scraper for more than 15 search engines, including Google. duckduckgo, Bing, Ask, etc...

crawlereducationinformation-gathering+1
251 year ago
uBlockOrigin-HUGE-AI-Blocklist preview

uBlockOrigin-HUGE-AI-Blocklist

GitHublaylavish/ublockorigin-huge-ai-blocklist

A huge blocklist of manually curated sites that contain AI generated imagery for uBlock Origin & uBlacklist.

curated-resourcesdefensive-toolsgeneral-purpose-utilities+2
5.8k1 year ago
Presentations preview

Presentations

GitHubstar-sg/presentations

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

binary-exploitationcontainer-securitycurated-resources+6
1373 months ago
MalleableC2Profiles preview

MalleableC2Profiles

GitHubbluscreenofjeff/malleablec2profiles

Malleable C2 profiles for Cobalt Strike

command-and-controlexploit-frameworksnetwork-security+3
779 years ago
sqliv preview
Archived

sqliv

GitHubthe-robot/sqliv

massive SQL injection vulnerability scanner

crawlerinformation-gatheringreconnaissance+2
1.2k8 years ago