Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k9h 25m ago

zaproxy

zaproxy/zaproxy

15.6k10h 19m ago

openvas-scanner

greenbone/openvas-scanner

4.8k1 day ago

trivy

aquasecurity/trivy

37.4k15h 22m ago

vuls

future-architect/vuls

12.2k9 days ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k12h 46m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k1 month ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

29066 results

CVE-2025-32463

kh4sh3i/cve-2025-32463

Local Privilege Escalation to Root via Sudo chroot in Linux

privilege-escalationvulnerability-analysisexploitation+3

4721 year ago

CVE-2016-0051

koczkatamas/cve-2016-0051

EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)

privilege-escalationvulnerability-analysisexploitation+2

32310 years ago

bomber

devops-kung-fu/bomber

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

vulnerability-scannersdevsecopssupply-chain-security

6248 months ago

git-scanner

hightechsec/git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

vulnerability-scannersinformation-gatheringweb-security+1

3846 years ago

pulledpork

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

vulnerability-scannersthreat-feeds-aggregatorsconfiguration-auditing+2

4425 years ago

UniPwn

bin4ry/unipwn

BLE exploit framework for Unitree robots: command injection via hardcoded AES keys enables remote takeover, payload injection, and wormable…

bluetooth-securityexploit-frameworksvulnerability-analysis+4

3981 year ago

presentations

edwardzpeng/presentations

Slides and conference talks from security research covering Windows, virtualization, web, and blockchain exploit techniques, presented at Black Hat,…

vulnerability-analysisexploitationweb-security+5

2721 month ago

Bug-Bounty

anlominus/bug-bounty

reconnaissancevulnerability-analysisweb-security+5

6511 year ago

CVE-2021-38647

horizon3ai/cve-2021-38647

Proof-of-concept exploit for CVE-2021-38647 (OMIGOD), an unauthenticated remote code execution vulnerability in the OMI agent commonly deployed on…

vulnerability-analysisexploitationweb-application-exploitation+3

2335 years ago

djangohunter

jimywork/djangohunter

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.

vulnerability-scannersinformation-gatheringweb-security+1

2507 years ago

smiiiiiiiiiiiiiiii

xoreaxeaxeax/smiiiiiiiiiiiiiiii

A very very very very very very very long interrupt

vulnerability-analysisexploitationhardware-hacking+1

1582 months ago

anamnesis-release

seanheelan/anamnesis-release

Evaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…

penetration-testing-frameworksexploit-frameworksvulnerability-analysis+9

6289 months ago

CVE-2022-33679

bdenneu/cve-2022-33679

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

vulnerability-analysisexploitationcryptography+2

4151 year ago

raven

cycodelabs/raven

Scans GitHub Actions CI/CD workflows for security vulnerabilities, indexes findings into a Neo4j graph database, and provides a query library for…

vulnerability-scannerscode-analysisdevsecops+3

7461 year ago

Blacklist3r

notsosecure/blacklist3r

Audits ASP.NET applications for pre-published machine keys to detect ViewState deserialization vulnerabilities and insecure forms authentication…

vulnerability-scannersencryption-decryption-toolsweb-security+1

6541 year ago

regextokens

odomojuli/regextokens

list of regex patterns for oauth / api tokens with provided source

defensive-toolsstatic-analysisvulnerability-scanners+5

2924 months ago

pacemaker

lekensteyn/pacemaker

Heartbleed (CVE-2014-0160) client exploit

vulnerability-analysisexploitationweb-security+3

33010 years ago

CallStranger

yunuscadirci/callstranger

Vulnerability checker for Callstranger (CVE-2020-12695)

vulnerability-scannersiot-securityport-scanning+3

4036 years ago

Previous 1…798081…100 Next