Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

268 results

packetfence

inverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

authentication-authorizationconfiguration-auditingdefensive-tools+6

1.7k

19h 58m ago

apache__incubator-dubbo_CVE-2021-30181_2-6-8

shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…

api-securityauthentication-authorizationcloud-security+4

1 year ago

MakerChecker

makerchecker/makerchecker

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…

ai-securityauthentication-authorizationcloud-security+7

522 months ago

BadHost-CVE-2026-48710-Exploit

bhanunamikaze/badhost-cve-2026-48710-exploit

Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI

api-security-testingauthentication-authorizationexploitation+4

13 months ago

Automated-scanner-CVE-2026-41940

sardine-web/automated-scanner-cve-2026-41940

Automated scanner & post-exploitation toolkit for CVE-2026-41940 — cPanel & WHM root authentication bypass via session-file CRLF injection

authentication-authorizationcommand-and-controlexploitation+8

13 months ago

Invoke-noPac

ricardojba/invoke-nopac

.Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac

authentication-authorizationexploitationpayload-generation+3

623 years ago

CVE-2025-2825

iteride/cve-2025-2825

Detailed analysis and PoC exploit for CVE-2025-2825, an authentication bypass in CrushFTP. Includes nuclei templates, multi-threaded scanner, and…

authentication-authorizationexploitationpayload-development+3

111 months ago

CVE-2026-48611-EXPLOIT

diznev/cve-2026-48611-exploit

CVE-2026-48611- authentication bypass in phpBB

authentication-authorizationexploitationpenetration-testing+3

3 months ago

CVE-2026-41940

murrez/cve-2026-41940

Proof-of-concept exploit for CVE-2026-41940, an authentication bypass chain in WHM/cPanel. Multi-threaded scanner that changes root password on…

authentication-authorizationexploitationpenetration-testing+3

64 months ago

CVE-2025-29927

sdrtba/cve-2025-29927

Proof-of-concept and mass scanning toolkit for CVE-2025-29927, a Next.js middleware authorization bypass via forged x-middleware-subrequest header.…

authentication-authorizationeducationids-ips-evasion+3

0 years ago

vault

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

authenticationauthentication-authorizationcloud-security+5

36.3k9h 36m ago

certbot

certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…

authentication-authorizationcloud-securityconfiguration-auditing+3

33.2k7 days ago

infisical

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

authentication-authorizationcloud-securityconfiguration-auditing+4

29.3k1 day ago

opennhp

opennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

authentication-authorizationcloud-securitycryptography+3

13.9k13h 19m ago

cosign

sigstore/cosign

Code signing and transparency for containers and binaries

authentication-authorizationcloud-securitycontainer-security+3

6.3k1 day ago

spire

spiffe/spire

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…

authenticationauthentication-authorizationcloud-infrastructure-security+5

2.5k5 hours ago

onecli

onecli/onecli

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

ai-securityapi-securityauthentication-authorization+5

3.5k7 days ago

BurpSuite-For-Pentester

ignitetechnologies/burpsuite-for-pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…

authentication-authorizationcurated-resourceseducation+7

2.6k6 months ago

Previous12…15 Next