Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k8h 3m ago

zaproxy

zaproxy/zaproxy

15.6k16h 10m ago

openvas-scanner

greenbone/openvas-scanner

4.8k16h 42m ago

trivy

aquasecurity/trivy

37.4k16h 56m ago

vuls

future-architect/vuls

12.2k7 days ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k13h 14m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k1 month ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

28662 results

CVE-2022-21907

zz-socmap/cve-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

vulnerability-analysisexploitationweb-security+3

3614 years ago

CVE-2022-29464

hakivvi/cve-2022-29464

Python exploit for CVE-2022-29464, an unauthenticated arbitrary file upload vulnerability in WSO2 servers, enabling remote code execution via…

payload-generationvulnerability-analysisexploitation+3

3784 years ago

CVE-2019-0192

mpgn/cve-2019-0192

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

vulnerability-analysisexploitationweb-application-exploitation+3

2087 years ago

umap2

nccgroup/umap2

Umap2 is the second revision of NCC Group's python based USB host security assessment tool.

embedded-systems-securitydynamic-analysis-sandboxingvulnerability-analysis+4

2825 years ago

TLS-Scanner

tls-attacker/tls-scanner

Automated TLS server and client configuration scanner for pentesters and researchers. Evaluates cipher suites, protocol versions, and security…

vulnerability-scannersnetwork-securitycryptography+1

2841 month ago

DLLHijackHunter

ghostvectoracademy/dllhijackhunter

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

privilege-escalationvulnerability-scannerspayload-generation+8

39622h 58m ago

LiveTargetsFinder

allyomalley/livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather…

reconnaissancenetwork-mappingport-scanning+3

3666 years ago

chainoffools

kudelskisecurity/chainoffools

Proof-of-concept exploit for CVE-2020-0601 Windows CryptoAPI spoofing vulnerability, demonstrating rogue CA certificate generation using elliptic…

vulnerability-analysiscode-analysisexploitation+2

3353 years ago

CVE-2022-21894

wack0/cve-2022-21894

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

privilege-escalationencryption-decryption-toolsvulnerability-analysis+5

3523 years ago

CVE-2020-1472

voidsec/cve-2020-1472

Exploit Code for CVE-2020-1472 aka Zerologon

password-attacksvulnerability-analysisexploitation+1

3965 years ago

SAMLRaider

compasssecurity/samlraider

SAML2 Burp Extension

encryption-decryption-toolsvulnerability-analysisweb-application-exploitation+6

4478 months ago

Exchange2domain

ridter/exchange2domain

CVE-2018-8581

privilege-escalationreconnaissancevulnerability-analysis+4

3694 years ago

CVE-2026-40369-EXPLOIT

orinimron123/cve-2026-40369-exploit

Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render…

privilege-escalationvulnerability-analysisexploitation+1

2605 months ago

dnsbin

ettic-team/dnsbin

DNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…

vulnerability-analysisdata-exfiltrationpenetration-testing+1

2428 years ago

bluekeep

0xeb-bp/bluekeep

Public work for CVE-2019-0708

vulnerability-analysisexploitationpenetration-testing+3

2936 years ago

mobileAudit

mpast/mobileaudit

Django application that performs SAST and Malware Analysis for Android APKs

android-securitystatic-analysisvulnerability-analysis+4

2283 days ago

SecurityManageFramwork

we1h0/securitymanageframwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management,…

password-crackingvulnerability-scannersweb-vulnerability-scanners+4

4306 years ago

chef-ssh-hardening

dev-sec/chef-ssh-hardening

This chef cookbook provides secure ssh-client and ssh-server configurations.

cloud-infrastructure-securityconfiguration-auditingnetwork-security+2

16824 days ago

Previous 1…848586…100 Next