Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
15 results
xmlsec preview

xmlsec

GitHublsh123/xmlsec

XML Security Library

api-securityauthentication-authorizationcryptography+2
1636h 35m ago
suds preview

suds

GitHubosirium/suds

Clone of suds 0.4 + suds-0.4-CVE-2013-2217.patch

api-securityapi-security-testingscripting-automation+3
8 years ago
rabl-old preview
Archived

rabl-old

GitHubcph/rabl-old

rabl 0.8.6 + fix for CVE-2014-4671

api-securitygeneral-purpose-utilitiesvulnerability-analysis+1
9 years ago
CheckPoint-CVE-Webscanner preview

CheckPoint-CVE-Webscanner

GitHubwadesweaponshed/checkpoint-cve-webscanner

A web version of the bash scripts wrote for Check Point CVE-2026-50751 and CVE-2026-50752. This uses a local server to scan and make changes using…

api-securityconfiguration-auditingnetwork-security+2
12 months ago
PAPIMonitor preview

PAPIMonitor

GitHub0xdad0/papimonitor

Frida-based runtime API monitor for Android apps that logs invoked APIs, parameters, return values, and call origins across predefined or custom…

android-securityapi-securitydynamic-analysis-sandboxing+1
872 years ago
knocker preview

knocker

GitHubfariszr/knocker

Knocker, a knock based access control service for your homelab

api-securityauthenticationcloud-security+2
13511 days ago
apache_skywalking preview

apache_skywalking

GitHubshanika04/apache_skywalking

CVE-2020-9483 OR CVE-2020-13921

anomaly-detectionapi-securitycloud-infrastructure-security+9
15 years ago
Sirius preview

Sirius

GitHubsiriusscan/sirius
api-securitycloud-securitycontainer-security+6
1.7k2 days ago
security-study-plan preview

security-study-plan

GitHubjassics/security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…

api-securitycloud-securitycryptography+8
5.0k9 days ago
archerysec preview

archerysec

GitHubarcherysec/archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

api-securitycode-analysisconfiguration-auditing+5
2.5k1 year ago
gate0 preview

gate0

GitHubqarait/gate0

A small, auditable, terminating, deterministic micro-policy engine

api-securityauthentication-authorizationcloud-security+1
176 months ago
CVE-2026-11103-GraphQL-Batching-Alias-Rate-Limit-Bypass preview

CVE-2026-11103-GraphQL-Batching-Alias-Rate-Limit-Bypass

GitHubgeorge0papasotiriou/cve-2026-11103-graphql-batching-alias-rate-limit-bypass
api-securityapi-security-testingexploitation+3
17 days ago
about-hmac preview

about-hmac

GitHubpassword123456/about-hmac

HMAC Implementation Example and Explanation

api-securityauthenticationcryptography+1
22 years ago
CVE-2025-63667 preview

CVE-2025-63667

GitHubremenis/cve-2025-63667

Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext…

api-securityauthenticationembedded-systems-security+4
19 months ago
apache__dubbo_CVE-2021-30180_2-7-9 preview

apache__dubbo_CVE-2021-30180_2-7-9

GitHubshoucheng3/apache__dubbo_cve-2021-30180_2-7-9
api-securityapi-security-testingexploitation+3
1 year ago