Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Penetration testing methodologies, frameworks, reporting, and automation tools.

Kitploit recommended

Top tools

10 selected

metasploit-framework

rapid7/metasploit-framework

38.8k7h 55m ago

nuclei

projectdiscovery/nuclei

30.4k16h 38m ago

nmap

nmap/nmap

13.3k3 days ago

sqlmap

sqlmapproject/sqlmap

38.2k21h 4m ago

zaproxy

zaproxy/zaproxy

15.6k18h 4m ago

NetExec

pennyw0rth/netexec

5.8k13h 49m ago

impacket

fortra/impacket

16.0k2h 56m ago

ffuf

ffuf/ffuf

16.5k1 month ago

amass

owasp-amass/amass

15.0k2 days ago

#10

subfinder

projectdiscovery/subfinder

14.2k1 day ago

Newest Relevance Most popular Recently updated

20903 results

Nettacker

owasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

penetration-testing-frameworksreconnaissancevulnerability-scanners+14

5.5k4 days ago

firmware

brucedevices/firmware

Predatory ESP32 Firmware

embedded-systems-securitywi-fi-auditingbluetooth-security+9

6.4k1 month ago

commando-vm

mandiant/commando-vm

Customizable Windows-based virtual machine distribution pre-packaged with offensive security tools for penetration testing and red teaming operations.

dynamic-analysis-sandboxingsecurity-virtualizationpenetration-testing+1

7.8k1 year ago

WebHackersWeapons

hahwul/webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

osintreconnaissancevulnerability-scanners+7

5.0k1 month ago

Active-Directory-Exploitation-Cheat-Sheet

s1ckb0y1337/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

privilege-escalationreconnaissanceexploitation+5

6.7k5 months ago

DeepAudit

lintsinghua/deepaudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。

static-analysisvulnerability-scannerscode-analysis+5

6.8k12 days ago

BurpSuite-collections

mr-xn/burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using…

vulnerability-scannersweb-securitypenetration-testing+2

4.0k19 days ago

linux-exploit-suggester

the-z-labs/linux-exploit-suggester

Audits Linux kernel exposure to privilege escalation exploits and verifies kernel hardening security measures using heuristic analysis and…

privilege-escalationvulnerability-analysisexploitation+1

6.6k7 days ago

K8tools

k8gege/k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…

password-crackingprivilege-escalationreconnaissance+9

6.2k1 year ago

feroxbuster

epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

reconnaissanceweb-vulnerability-scannersdynamic-code-analysis+8

8.0k12 days ago

androguard

androguard/androguard

Reverse engineering and pentesting for Android applications

android-securitystatic-analysisdynamic-analysis-sandboxing+6

6.2k3 days ago

nikto

sullo/nikto

Nikto web server scanner

vulnerability-scannersweb-vulnerability-scannersvulnerability-analysis+6

10.6k2 months ago

gost

go-gost/gost

GO Simple Tunnel - a simple tunnel written in golang

general-purpose-utilitiesencryption-decryption-toolsweb-proxies-interception+7

7.7k20h 2m ago

bugbounty-cheatsheet

edoverflow/bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

reconnaissancepayload-generationvulnerability-analysis+6

6.5k5 years ago

osmedeus

j3ssie/osmedeus

A Modern Orchestration Engine for Security

osintreconnaissancevulnerability-scanners+5

6.5k23 days ago

pentestagent

gh05tcrew/pentestagent

AI agent framework for black-box security testing with autonomous multi-agent orchestration, built-in pentesting tools, and MCP integration for bug…

osintreconnaissancevulnerability-scanners+8

2.9k1 day ago

android-reverse-engineering-skill

simoneavogadro/android-reverse-engineering-skill

Decompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…

android-securitystatic-analysisvulnerability-analysis+8

6.7k16 days ago

iodine

yarrick/iodine

Tunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.

ids-ips-evasiondata-exfiltrationnetwork-security+4

8.0k14h 27m ago

Previous 1…789…100 Next