Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for analyzing, monitoring, and securing network infrastructure and protocols.

Kitploit recommended

Top tools

10 selected

suricata

oisf/suricata

6.5k1 day ago

zeek

zeek/zeek

7.8k12h 36m ago

wireshark

wireshark/wireshark

10.1k21h 7m ago

nmap

nmap/nmap

13.3k3 days ago

snort3

snort3/snort3

3.4k3 months ago

wazuh

wazuh/wazuh

16.5k1 day ago

osquery

osquery/osquery

23.4k1 day ago

falco

falcosecurity/falco

9.5k17h 40m ago

securityonion

security-onion-solutions/securityonion

4.9k1 month ago

#10

crowdsec

crowdsecurity/crowdsec

14.5k1 day ago

Newest Relevance Most popular Recently updated

3389 results

go-zeek-broker-ws

corelight/go-zeek-broker-ws

A Go library for using zeek broker's websocket API

authentication-authorizationnetwork-securityutilities-frameworks+1

51 month ago

ESPTouchCatcher

salgio/esptouchcatcher

eWeLinkESPT is a tool that automatically decodes and decrypts the WiFi network credentials transmitted to a supported ESP-based IoT device by the…

packet-sniffing-analysisiot-securityvulnerability-analysis+4

55 years ago

heartbleed-dtls

hreese/heartbleed-dtls

Proof-of-concept exploit for CVE-2014-0160 (Heartbleed) targeting DTLS, demonstrating memory disclosure vulnerability in TLS/DTLS implementations.

vulnerability-analysisexploitationnetwork-security+2

510 years ago

InterceptSuite

interceptsuite/interceptsuite

MITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.

packet-sniffing-analysisiot-securityweb-proxies-interception+2

22 days ago

zeek-caldera-detector

corelight/zeek-caldera-detector

A Zeek based Mitre Caldera detector.

network-securitycommand-and-controlthreat-intelligence+2

21 year ago

http2-bomb-analysis-paper

minc-nice-100/http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK indexed-reference amplification + flow-control stall. A high school student's full protocol analysis (LaTeX). CVE-2026-49975,…

vulnerability-analysisweb-securitynetwork-security+2

14 months ago

cve-2026-0828

mein-0/cve-2026-0828

Proof-of-concept exploit for CVE-2026-0828, a BYOVD vulnerability in Safetica ProcessMonitorDriver.sys allowing unprivileged termination of…

privilege-escalationvulnerability-analysisexploitation+6

15 months ago

netsec-project

masjohncook/netsec-project

Script of Network Security Project - Attack on CVE-2021-22555

network-mappingpassword-attacksport-scanning+5

13 years ago

patch-manual-CVE-2025-26465-e-CVE-2025-26466

dolutech/patch-manual-cve-2025-26465-e-cve-2025-26466

Patch Manual para a correção das CVE-2025-26465-e-CVE-2025-26466, para sistemas sem update do OpenSSH

vulnerability-analysisscripting-automationconfiguration-auditing+3

11 year ago

deadend

sibexico/deadend

Lightweight scriptable honeypot runner

defensive-toolsport-scanningscripting-automation+2

15 months ago

Archived

purpleteam-tls-checker

purpleteam-labs/purpleteam-tls-checker

TLS checking component of purpleteam

vulnerability-scannersweb-securitynetwork-security+2

15 years ago

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypass

Educational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…

vulnerability-analysisexploitationnetwork-security+2

2 months ago

Massive-Subdomain-Enumerator

jenderal92/massive-subdomain-enumerator

This tool uses a combination of dictionary-based wordlists (brute-force) and DNS resolution checks to verify the existence of subdomains.

reconnaissancedns-subdomain-enumerationinformation-gathering+2

5 months ago

redis-checker

randomrobbiebf/redis-checker

Checks for exposed Redis servers

reconnaissancevulnerability-scannersinformation-gathering+3

3 years ago

CVE-2025-55182-scanner

yaupunal/cve-2025-55182-scanner

CVE-2025-55182-scanner with 2 different method

defensive-toolsvulnerability-scannersweb-vulnerability-scanners+3

10 months ago

G3-Loop-DoS

renancesarr/g3-loop-dos

This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169…

vulnerability-scannersexploitationnetwork-security+2

2 years ago

Windows-ZTE-Loader

injectionmethod/windows-zte-loader

Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar

reconnaissancevulnerability-scannersnetwork-mapping+2

3 years ago

smb

hackingyseguridad/smb

Shell script collection for SMB protocol auditing, vulnerability detection (EternalBlue, SMBGhost), null session enumeration, credential brute-force,…

reconnaissancepassword-attacksvulnerability-analysis+5

9 months ago

Previous 1…99100Next