Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

114 results

Priv-QDNN

jefffffffu/priv-qdnn

Research codebase for privacy evaluation of quantized neural networks: trains target/shadow models under PTQ/QAT and runs membership-inference…

ai-securityeducationmachine-learning+2

2 months ago

confirmesc

capture0x/confirmesc

Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent…

ai-securitycommand-and-controlctf+7

528 days ago

rag-seguridad

rdelasierra-uy/rag-seguridad

CyberRAG — RAG 100% local (Ollama) sobre apuntes y libros de ciberseguridad: recuperación híbrida, respuestas con citas, asistente de pentest por…

ai-securityctfcurated-resources+7

5 days ago

HashcatRosetta

bandrel/hashcatrosetta

Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax

ai-securityeducationhash-analysis+4

131 month ago

cve-2026-61732-lab

inertfluid/cve-2026-61732-lab

Benign, self-contained reproduction of CVE-2026-61732 (Decepticon ChatML role-boundary forgery)

ai-securityeducationexploitation+5

1 month ago

FinRED-paper

selectstar-ai/finred-paper

finance domain specific red-teaming benchmark evaluation rubric

ai-securityeducationmachine-learning+4

424 days ago

recurse

recurse-labs/recurse

Agentic reverse engineering IDE with a pure-Rust multi-architecture disassembler, native decompiler, debugger, and LLM agent for binary analysis and…

ai-assisted-reversingai-securitybinary-analysis+7

2941 day ago

Oihk-pentesting

broskigx/oihk-pentesting

Autonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…

ai-securityeducationexploit-frameworks+7

1022 days ago

pentest-harness

s1n6h/pentest-harness

Self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Plugin-based, multi-provider LLM support with local…

ai-securitycommand-and-controlctf+7

4431 month ago

ai-ctf

mubix/ai-ctf

Local AI Capture-the-Flag platform with guided lessons on prompt injection, tool-call abuse, and OSINT against six simulated chatbot personas.

ai-securityctfeducation+6

761 month ago

comfyui-CVE-2026-68771-PoC

oscar-collado/comfyui-cve-2026-68771-poc

Security research lab — Unauthenticated RCE via insecure deserialization in ComfyUI v0.23.0 (CVSS 9.8). Isolated Docker environment, technical…

ai-securityeducationexploitation+3

1 month ago

red-teaming-auto-mode

safety-research/red-teaming-auto-mode

Research code for red-teaming AI auto-mode monitors, including simulation evals, fuzzing, and monitor implementations for Claude Code and Codex…

ai-securityeducationfuzzing+3

51 month ago

agentic-workflow-injection

sushant-me/agentic-workflow-injection

Reproducible vulnerable and fixed GitHub Actions fixtures for agentic workflow injection (CVE-2026-44246), with measured detector coverage and…

ai-securitydevsecopseducation+4

1 day ago

context-segmentation

9xeb/context-segmentation

Multi-agent automated context management for long horizon tasks in local AI Agents

ai-securityctfeducation+3

14 months ago

pentest-copilot

bugbasesecurity/pentest-copilot

AI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…

ai-securitycommand-and-controlctf+8

1.5k2 months ago

gha-lab-733c168b88

pvharmo2/gha-lab-733c168b88

Reproduces CVE-2026-44246, a prompt injection vulnerability in nnU-Net's GitHub Actions triage agent, demonstrating how issue content is inlined into…

ai-securityeducationpapers-research+1

1 month ago

Aether

fknmega/aether

AI-driven OSINT and security research agent that builds a live knowledge graph from public data, with bundled recon tools and offensive-security…

ai-securityctfcurated-resources+5

1801 month ago

CUAHarm

db-ol/cuaharm

Benchmark for evaluating safety risks of computer-using agents, with 104 realistic misuse scenarios across seven malicious categories, supporting…

ai-securityeducationlabs-practice+3

11 year ago

Previous12 3 4 5 6 7 Next