Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k15h 4m ago

zaproxy

zaproxy/zaproxy

15.6k10h 6m ago

openvas-scanner

greenbone/openvas-scanner

4.8k1 day ago

trivy

aquasecurity/trivy

37.4k1 day ago

vuls

future-architect/vuls

12.2k1 day ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k8h 53m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k25 days ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

28662 results

osueta

c0r3dump3d/osueta

A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.

vulnerability-analysisexploitationinformation-gathering+1

1635 years ago

Presentations

star-sg/presentations

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

container-securityvulnerability-analysisexploitation+6

1379 days ago

project-memoria-detector

forescout/project-memoria-detector

Active fingerprinting tool that identifies 16 embedded TCP/IP stacks on network devices using ICMP, TCP, HTTP, SSH, and FTP probing techniques for…

embedded-systems-securityiot-securityvulnerability-analysis+2

3235 years ago

CVE-Reverse

httpvoid/cve-reverse

Curated list of CVEs that have been reverse-engineered and analyzed, serving as a resource for vulnerability research, exploitation understanding,…

vulnerability-analysisreverse-engineeringbinary-analysis+3

2834 years ago

heaphopper

angr/heaphopper

HeapHopper is a bounded model checking framework for Heap-implementations

vulnerability-analysisfuzzingbinary-analysis+2

2281 month ago

ProxyLogon

hausec/proxylogon

Python exploit for ProxyLogon (CVE-2021-26855) targeting Microsoft Exchange servers. Drops a webshell for remote command execution and…

vulnerability-scannersexploitationweb-application-exploitation+1

2985 years ago

pphack

edoardottt/pphack

Advanced Client-Side Prototype Pollution Scanner

vulnerability-scannersweb-application-exploitationweb-security+1

2507 days ago

003Recon

003random/003recon

Some tools to automate recon - 003random

reconnaissancevulnerability-scannersinformation-gathering+2

2968 years ago

CVE-2024-4577

watchtowrlabs/cve-2024-4577

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

vulnerability-analysisexploitationweb-application-exploitation+3

3172 years ago

laravel-exploits

ambionics/laravel-exploits

Exploit for CVE-2021-3129

payload-generationvulnerability-analysisexploitation+3

2895 years ago

AV_Kernel_Vulns

bee13oy/av_kernel_vulns

Pocs for Antivirus Software‘s Kernel Vulnerabilities

privilege-escalationvulnerability-analysisexploitation+2

2649 years ago

RTF_11882_0802

ridter/rtf_11882_0802

PoC for CVE-2018-0802 And CVE-2017-11882

payload-generationvulnerability-analysisexploitation+2

1668 years ago

VMUnprotect.Dumper

void-stack/vmunprotect.dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

dynamic-code-analysisreverse-engineeringmalware-analysis+1

4594 years ago

MESH

barghest-ngo/mesh

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

android-securitypacket-sniffing-analysisencryption-decryption-tools+8

1926 days ago

cve-maker

msd0pe-1/cve-maker

CLI tool to search CVEs and exploits from NIST, ExploitDB, and GitHub databases. Supports exploit compilation detection and lists latest critical…

exploit-frameworksvulnerability-analysisinformation-gathering

4862 years ago

ReconNote

0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

reconnaissancevulnerability-scannersinformation-gathering+3

4115 years ago

Vega

subgraph/vega

Subgraph Vega

vulnerability-scannersdynamic-analysis-sandboxingweb-application-exploitation+3

36310 years ago

CVE-2023-4863

mistymntncop/cve-2023-4863

Proof-of-concept for CVE-2023-4863, a heap buffer overflow in WebP image decoding. Demonstrates the code_lengths trigger mechanism discovered by…

vulnerability-analysiscode-analysisexploitation+2

3182 years ago

Previous 1…939495…100 Next