Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k7h 32m ago

zaproxy

zaproxy/zaproxy

15.6k13h 33m ago

openvas-scanner

greenbone/openvas-scanner

4.8k9h 58m ago

trivy

aquasecurity/trivy

37.4k11h 23m ago

vuls

future-architect/vuls

12.2k1 day ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k13h 43m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k24 days ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

28664 results

CVE-2022-0847

r1is/cve-2022-0847

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847…

privilege-escalationvulnerability-analysisexploitation+2

2823 years ago

vulnerable-mcp-servers-lab

appsecco/vulnerable-mcp-servers-lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

privilege-escalationvulnerability-analysiscode-analysis+7

27410 months ago

CVE-2018-13379

milo2012/cve-2018-13379

CVE-2018-13379

vulnerability-analysisexploitationweb-application-exploitation+1

2537 years ago

chomp-scan

solomonsklash/chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

reconnaissancevulnerability-scannersport-scanning+6

3936 years ago

NextRce

ynsmroztas/nextrce

React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)

reconnaissancevulnerability-scannersexploitation+5

25510 months ago

DELTA

opennetworkingfoundation/delta

PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK

vulnerability-analysisnetwork-securitypenetration-testing

2227 years ago

femida

wish-i-was/femida

Automated blind-xss search for Burp Suite

vulnerability-scannersdynamic-analysis-sandboxingweb-security+1

2837 years ago

CVE-2024-30088

tykawaii98/cve-2024-30088

Proof-of-concept exploit for CVE-2024-30088, a Windows kernel TOCTOU vulnerability in AuthzBasepCopyoutInternalSecurityAttributes enabling arbitrary…

privilege-escalationvulnerability-analysisexploitation+1

2902 years ago

VisualDoor

darrenmartyn/visualdoor

SonicWall SSL-VPN Exploit

vulnerability-analysisexploitationweb-security

1845 years ago

sleigh

lifting-bits/sleigh

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

static-analysiscode-analysisdynamic-code-analysis+4

1941 day ago

hubble

hubblestack/hubble

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event…

configuration-auditingdevsecopsthreat-intelligence+2

3853 years ago

google_explorer

paralelo14/google_explorer

Mass exploitation tool in python

reconnaissancevulnerability-scannersexploitation+3

2067 years ago

w12scan-client

w-digital-scanner/w12scan-client

Network asset discovery and scanning client that integrates nmap and masscan for large-scale asset identification, port scanning, and vulnerability…

reconnaissancevulnerability-scannersnetwork-mapping+3

2153 years ago

rewind

quarkslab/rewind

Snapshot-based coverage-guided windows kernel fuzzer

dynamic-analysis-sandboxingvulnerability-analysisreverse-engineering+1

3275 years ago

cheese

zhuowei/cheese

CVE-2025-21479 proof-of-concept, I think

android-securityembedded-systems-securityprivilege-escalation+7

2681 year ago

dirsearch

evilsocket/dirsearch

Concurrent web directory and file brute-forcing tool that performs HEAD requests against a target URL using a wordlist, with support for custom…

vulnerability-scannersinformation-gatheringweb-security+1

2795 years ago

hakkuframework

4shadoww/hakkuframework

Hakku Framework penetration testing

osintpassword-crackingpenetration-testing-frameworks+7

3625 years ago

dora

sdushantha/dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

vulnerability-analysisinformation-gatheringpenetration-testing+1

3434 years ago

Previous 1…979899 100 Next

Vulnerability Analysis

Top tools

nuclei

zaproxy

openvas-scanner

trivy

vuls

lynis

prowler

ScoutSuite

wapiti

nikto

CVE-2022-0847

vulnerable-mcp-servers-lab

CVE-2018-13379

chomp-scan

NextRce

DELTA

femida

CVE-2024-30088

VisualDoor

sleigh

hubble

google_explorer

w12scan-client

rewind

cheese

dirsearch

hakkuframework

dora