Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.

Newest Relevance Most popular Recently updated

23062 results

shannon

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

reconnaissancevulnerability-scannerscode-analysis+5

46.6k

1 day ago

Archived

hacker-roadmap

sundowndev/hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

password-attacksexploitationinformation-gathering+6

15.5k2 years ago

Sn1per

1n3/sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

osintpenetration-testing-frameworksreconnaissance+7

10.8k1 month ago

pcileech

ufrisk/pcileech

Direct Memory Access (DMA) Attack Software

privilege-escalationmemory-forensicsexploitation+7

7.9k26 days ago

firmware

brucedevices/firmware

Predatory ESP32 Firmware

embedded-systems-securitywi-fi-auditingbluetooth-security+9

6.4k9 days ago

AutoSploit

nullarray/autosploit

Automated Mass Exploiter

reconnaissanceexploit-frameworkspayload-generation+5

5.2k6 years ago

CiLocks

tegal1337/cilocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

android-securityosintphishing-tools+7

3.0k3 years ago

slipstream

samyk/slipstream

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by…

reconnaissanceexploitationweb-security+2

2.0k3 years ago

KrbRelayUp

dec0ne/krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

privilege-escalationexploitationimpersonation-tools+4

1.7k4 years ago

nuclei-wordfence-cve

topscoder/nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

vulnerability-scannersvulnerability-analysisexploitation+3

1.3k2h 15m ago

Black-Tool

mrprogrammer2938/black-tool

Install the tools and start Attacking , black-tool v5.5.5 ! ⬛

penetration-testing-frameworksphishing-toolspassword-attacks+4

6412 years ago

brutus

praetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

vulnerability-scannerspassword-attacksexploitation+7

30715h 56m ago

AD-PathFinder

netspi/ad-pathfinder

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

password-crackingprivilege-escalationreconnaissance+7

9512 days ago

pupy

alessandroz/pupy

Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It…

password-crackingprivilege-escalationpayload-generation+7

918 years ago

CVE-2026-20637-AppleSEPKeyStore-UAF

0xjohnnydev/cve-2026-20637-applesepkeystore-uaf

CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

ios-securityvulnerability-analysisexploitation+2

541 month ago

wikipedia-c2

daniel-infosec/wikipedia-c2

POC for utilizing wikipedia API for Command and Control

exploitationpost-exploitationpenetration-testing+3

297 years ago

CVE-2026-43499-RMX5200

sorrow404null/cve-2026-43499-rmx5200

android-securityprivilege-escalationexploit-frameworks+6

61 month ago

CVE-2023-26692

bigzooooz/cve-2023-26692

ZCBS/ZBBS/ZPBS v4.14k - Reflected XSS

vulnerability-analysisexploitationweb-application-exploitation+2

13 years ago

Previous 123…1282 Next