Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Newest Relevance Most popular Recently updated

25175 results

CVE-2025-49132

melonlonmeo/cve-2025-49132

Poc - CVE-2025-49132

vulnerability-scannersweb-vulnerability-scannersexploitation+3

1 year ago

ApacheTomcatScanner

p0dalirius/apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

vulnerability-scannersvulnerability-analysisinformation-gathering+1

8927 months ago

WireBug

syss-research/wirebug

WireBug is a toolset for Voice-over-IP penetration testing

encryption-decryption-toolsvulnerability-analysisfuzzing+3

1774 years ago

TrojanSourceFinder

ariary/trojansourcefinder

🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)

static-analysisvulnerability-scannerscode-analysis+1

472 years ago

CVE-2026-19478-PoC

davkharrr/cve-2026-19478-poc

Proof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…

vulnerability-analysisexploitationweb-application-exploitation+3

12 days ago

metasploit-framework

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

penetration-testing-frameworksprivilege-escalationreconnaissance+9

38.8k6h 55m ago

How-To-Secure-A-Linux-Server

imthenachoman/how-to-secure-a-linux-server

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

vulnerability-scannersconfiguration-auditingnetwork-security+7

30.3k1 month ago

ggshield

gitguardian/ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret…

vulnerability-scannerscode-analysisdevsecops+1

2.0k14h 37m ago

getsploit

vulnerscom/getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

exploit-frameworksvulnerability-analysisinformation-gathering+1

1.8k3 days ago

XSRFProbe

0xinfection/xsrfprobe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

vulnerability-scannersweb-securitypenetration-testing+1

1.3k1 month ago

morris-worm

arialdomartini/morris-worm

The decompiled Morris Worm source code

vulnerability-analysisexploitationmalware-analysis+3

6735 years ago

shodan-dorks

nullfuzz-pentest/shodan-dorks

Shodan Dorks

osintreconnaissanceiot-security+4

5374 months ago

iocx

iocx-dev/iocx

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…

ioc-managementstatic-analysisvulnerability-analysis+6

2810 days ago

CVE-2017-7921-Research-Toolkit

wyl-cmd/cve-2017-7921-research-toolkit

用于借助FOFA快速测试海康威视的CVE-2017-7921漏洞，并且给出登陆账号和密码，并输出json文件。

vulnerability-scannersencryption-decryption-toolsiot-security+3

510 days ago

shannon

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

reconnaissancevulnerability-scannerscode-analysis+5

46.6k1 day ago