Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Penetration testing methodologies, frameworks, reporting, and automation tools.

Newest Relevance Most popular Recently updated

19033 results

airgeddon

v1s1t0r1sh3r3/airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

wi-fi-auditingpassword-attackswireless-security+2

7.9k1 month ago

OneForAll

shmilylty/oneforall

Multi-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…

osintreconnaissanceinformation-gathering+3

10.0k3 months ago

MobileApp-Pentest-Cheatsheet

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

android-securitypacket-sniffing-analysisstatic-analysis+9

5.3k2 years ago

NetExec

pennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

information-gatheringpost-exploitationnetwork-security+2

5.8k4 days ago

SpringBootVulExploit

landgrey/springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

vulnerability-analysisexploitationweb-application-exploitation+3

6.1k5 years ago

dirtyfrag

v4bel/dirtyfrag

privilege-escalationvulnerability-analysisexploitation+2

5.0k3 months ago

xray

chaitin/xray

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

vulnerability-scannersweb-vulnerability-scannersweb-security+1

11.7k2 years ago

Awesome-GPT-Agents

fr0gger/awesome-gpt-agents

A curated list of GPT agents for cybersecurity

osintvulnerability-analysisweb-security+6

6.6k2 years ago

WebHackersWeapons

hahwul/webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

osintreconnaissancevulnerability-scanners+7

5.0k5 months ago

nishang

samratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

password-crackingphishing-toolsprivilege-escalation+9

10.0k3 years ago

reconftw

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

osintreconnaissancevulnerability-scanners+7

8.0k1 month ago

naabu

projectdiscovery/naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…

reconnaissancenetwork-mappingport-scanning+2

6.2k10 days ago

SharpCollection

flangvik/sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…

privilege-escalationreconnaissancepassword-attacks+6

2.9k22 days ago

Modlishka

drk1wi/modlishka

Modlishka. Reverse Proxy.

web-proxies-interceptionreverse-engineeringphishing+3

5.4k6 days ago

ROADtools

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

cloud-infrastructure-securityreconnaissanceinformation-gathering+5

2.7k15 days ago

thc-tips-tricks-hacks-cheat-sheet

hackerschoice/thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

osintpersistence-mechanismslateral-movement+7

3.9k1 month ago

copy-fail-CVE-2026-31431

theori-io/copy-fail-cve-2026-31431

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code