Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for analyzing, monitoring, and securing network infrastructure and protocols.

Kitploit recommended

Top tools

10 selected

suricata

oisf/suricata

6.5k2 days ago

zeek

zeek/zeek

7.8k1 day ago

wireshark

wireshark/wireshark

10.2k5h 54m ago

nmap

nmap/nmap

13.3k1 day ago

snort3

snort3/snort3

3.5k1 day ago

wazuh

wazuh/wazuh

16.5k8h 12m ago

osquery

osquery/osquery

23.4k15h 13m ago

falco

falcosecurity/falco

9.6k1 day ago

securityonion

security-onion-solutions/securityonion

5.0k4 days ago

#10

crowdsec

crowdsecurity/crowdsec

14.5k7 days ago

Newest Relevance Most popular Recently updated

3505 results

ring3-kit

watchdogsecurity/ring3-kit

Hides Process From Task Manager Using NT API Hooking (NtQuerySystemInformation)

defensive-toolsprivilege-escalationpersistence-mechanisms+3

833 years ago

adnullenum

crypt0p3g/adnullenum

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

defensive-toolsosintreconnaissance+5

681 month ago

MicroTrick

digiprosec/microtrick

Self-contained Python PoC exploiting the MikroTrick SSH chain (CVE-2026-86060, CVE-2026-67279) to gain unauthenticated full admin access on MikroTik…

embedded-systems-securityprivilege-escalationiot-security+7

581 month ago

doona

wireghoul/doona

Network based protocol fuzzer

vulnerability-analysisexploitationfuzzing+3

754 years ago

NetworkSherlock

halildeniz/networksherlock

Multi-threaded port scanner with TCP/UDP support, banner grabbing, and Shodan integration for enhanced network reconnaissance and vulnerability…

osintreconnaissanceport-scanning+2

1151 year ago

LibTP

rasta-mouse/libtp

Crystal Palace library for proxying Nt API calls via the Threadpool

ids-ips-evasionpost-exploitationred-teaming+2

1061 year ago

NTDLL-reconstruction

sk4r4b/ntdll-reconstruction

A technique that mixes NTDLL unhooking and hellsgate gate varients

defensive-toolsids-ips-evasionreverse-engineering+6

369 days ago

essh

matthart1983/essh

Enhanced SSH client with TUI — manage connections, keys, and sessions

scripting-automationnetwork-securityutilities-frameworks+3

871 month ago

ecs-mapping

corelight/ecs-mapping

Mapping Corelight or Zeek data to Elastic Common Schema fields

network-securitythreat-intelligencelog-analysis

332 days ago

M3UAScan

sigploiter/m3uascan

A Scanner for M3UA protocol to detect Sigtran supporting nodes

vulnerability-scannersinformation-gatheringnetwork-security+1

658 years ago

TornadoC2

kamalx06/tornadoc2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…

penetration-testing-frameworkspersistence-mechanismsids-ips-evasion+9

343 days ago

CVE-2026-49975-POC

mrx-arafat/cve-2026-49975-poc

HTTP/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)

vulnerability-analysisexploitationweb-security+2

295 months ago

zoshrinkC2

demon-i386/zoshrinkc2

DNS over HTTPS targeted malware (only runs once)

payload-generationids-ips-evasioncryptography+3

973 years ago

wifi-pineapple-cloner-builds

xchwarze/wifi-pineapple-cloner-builds

Build repo from Universal Wifi pineapple hardware cloner

embedded-systems-securitywi-fi-auditingiot-security+6

912 years ago

Sleight

v1v1/sleight

Empire HTTP(S) C2 redirector setup script

web-proxies-interceptionids-ips-evasionpenetration-testing+2

488 years ago

certstream-server-rust

reloading01/certstream-server-rust

High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…