Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

18 results

MFASweep

dafthack/mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

authenticationcloud-securitypenetration-testing+2

1.7k

5 months ago

CVE-2020-27199

9lyph/cve-2020-27199

CVE-2020-27199

authenticationexploitationinformation-gathering+6

71 year ago

MSSqlPwner

scorpioneslabs/mssqlpwner

Advanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…

authenticationdatabase-securityexploitation+5

4631 month ago

relay_bible

rootsecdev/relay_bible

Technical Reference to multiple relay techniques

authenticationcurated-resourceseducation+8

1943 months ago

CVE-2026-41940

zildanz/cve-2026-41940

Mass authentication bypass exploit for CVE-2026-41940 with single-target and batch scanning modes. Automates password-based bypass testing across…

authenticationexploitationinformation-gathering+3

1 month ago

CVE-2025-53770

saladin0x1/cve-2025-53770

Proof-of-concept exploit toolkit for SharePoint ToolPane RCE (CVE-2025-53770) with scanner, payload analysis, and multiple exploitation methods for…

authenticationeducationexploitation+5

41 year ago

CVE-2018-9995-DVR-Credentials-Extractor

f7p-h4nn1b4l/cve-2018-9995-dvr-credentials-extractor

This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices.

authenticationembedded-systems-securityexploitation+5

11 month ago

CVE-2017-7921

0xf3d0rq/cve-2017-7921

CVE-2017-7921 is a critical vulnerability (CVSS score: 9.8) affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems…

authenticationexploitationinformation-gathering+3

19 months ago

CVE-2026-24061

monstertsl/cve-2026-24061

Python-based scanner that detects CVE-2026-24061 in GNU Inetutils telnetd, allowing batch testing of multiple targets for the authentication bypass…

authenticationexploitationpenetration-testing+2

17 months ago

apache__mina-sshd_CVE-2023-35887_2-9-2

shoucheng3/apache__mina-sshd_cve-2023-35887_2-9-2

Pure Java SSH client/server library implementing SSH-2 protocol with support for multiple ciphers, key exchanges, authentication methods, SFTP, SCP,…

authenticationcryptographyencryption-decryption-tools+5

1 year ago

proftpd-cve-2019-12815

lcartey/proftpd-cve-2019-12815

Exploit for CVE-2019-12815 in ProFTPD 1.3.x, a configurable FTP daemon with virtual users, multiple authentication methods, and modular architecture…

authenticationconfiguration-auditingexploitation+3

6 years ago

CVE-2026-73311

bombobombone/cve-2026-73311

Proof-of-concept exploit demonstrating OAuth2 authorization code reuse in XenForo before 2.3.13, allowing token replay and multiple token families.

authenticationexploitationvulnerability-analysis+2

5 days ago

DonPAPI

Automated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…

authenticationinformation-gatheringpassword-cracking+3

1.4k4 days ago

CredKing

ustayready/credking

Password spraying using AWS Lambda for IP rotation

authenticationcloud-securityidentity-access-management+3

6708 years ago

dlink

netsecfish/dlink

Proof-of-concept exploit and analysis for command injection and hardcoded backdoor credentials in D-Link NAS devices, enabling unauthenticated remote…

authenticationexploitationiot-security+3

992 years ago

CVE-2021-40113

karammahmad/cve-2021-40113

CVE documentation repository detailing unauthenticated remote vulnerabilities in Cisco Catalyst PON Series Switches ONT, including default credential…

authenticationconfiguration-auditingexploitation+3

3 years ago

CVE-2020-13941

mbadanoiu/cve-2020-13941

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr

authenticationexploitationlateral-movement+3

1 year ago

CVE-2024-57610

mr-un533n/cve-2024-57610

Lack of Rate Limiting in Sylius v2.0.2

authenticationinformation-gatheringpenetration-testing+2

1 year ago