Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
163 results
bug-bounty-reports-desai-vinayak preview

bug-bounty-reports-desai-vinayak

GitHubdesaivinayak449/bug-bounty-reports-desai-vinayak

Bug bounty and vulnerability research reports by Desai Vinayak — includes CVE-2023-50290 (Apache Solr) and Zscaler subdomain takeover findings.

cloud-securitycurated-resourcesdns-analysis+6
9 months ago
Honeypot_Smart_Infrastructure preview

Honeypot_Smart_Infrastructure

GitHubadarkst/honeypot_smart_infrastructure

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…

cloud-securitycontainer-securityeducation+4
12 years ago
vulnerability-remediation-cve-2013-3900 preview

vulnerability-remediation-cve-2013-3900

GitHubksgassama-lab/vulnerability-remediation-cve-2013-3900

End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated…

cloud-securityconfiguration-auditingeducation+3
7 months ago
mangy-beast preview

mangy-beast

GitHubcloudpassage/mangy-beast

CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)

cloud-securityconfiguration-auditingvulnerability-scanners+1
10 years ago
CVE-2021-41805 preview

CVE-2021-41805

GitHubacfirthh/cve-2021-41805

A proof-of-concept for CVE-2021-41805 which is a vulnerability in HashiCorp Consul Enterprise allowing for Remote Code Execution (RCE) with escalated…

cloud-securityeducationexploitation+4
1 year ago
CVE-2024-40635_POC preview

CVE-2024-40635_POC

GitHubyen5004/cve-2024-40635_poc

Proof of Concept code for proving CVE-2024-40635 vulnerability

cloud-securitycontainer-securityeducation+3
1 year ago
Log4j-CVE-2021-44228-Remediation preview

Log4j-CVE-2021-44228-Remediation

GitHubdigital-dev/log4j-cve-2021-44228-remediation

This powershell script is intended to be used by anyone looking to remediate the Log4j Vulnerability within their environment. It can target multiple…

cloud-securitydefensive-toolsincident-response+3
2 years ago
OpenSSH-CVE-2024-6387-Fix preview

OpenSSH-CVE-2024-6387-Fix

GitHubalmogopp/openssh-cve-2024-6387-fix

A Bash script to mitigate the CVE-2024-6387 vulnerability in OpenSSH by providing an option to upgrade to a secure version or apply a temporary…

cloud-securityconfiguration-auditingdevsecops+3
2 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubshefirot/cve-2024-3094

Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster

cloud-securitycontainer-escapeeducation+3
2 years ago
regreSSHion preview

regreSSHion

GitHubvkaushik-chef/regresshion

Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387

cloud-securityconfiguration-auditingdevsecops+1
2 years ago
AntiCropalypse preview
Archived

AntiCropalypse

GitHubqixils/anticropalypse

Discord bot for mitigating the aCropalypse vulnerability (CVE-2023-21036, CVE-2023-28303) by retroactively deleting vulnerable images

cloud-securitydata-recoverydefensive-tools+2
223 years ago
vulners-scanner preview
Archived

vulners-scanner

GitHubvulnerscom/vulners-scanner

Vulnerability scanner based on vulners.com audit API

cloud-securityconfiguration-auditingcontainer-security+3
648 years ago
salt-scanner preview
Archived

salt-scanner

GitHub0x4d31/salt-scanner

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

cloud-securityconfiguration-auditingdevsecops+3
2628 years ago
heroku-CVE-2013-0269 preview

heroku-CVE-2013-0269

GitHubheroku/heroku-cve-2013-0269

Inspect all of your Heroku apps for vulnerable versions of the JSON gem

cloud-securitydevsecopsmisconfiguration+2
22 months ago
CVE-2026-44578-PoC preview

CVE-2026-44578-PoC

GitHubtocong282/cve-2026-44578-poc
cloud-securityexploitationpenetration-testing+3
3 months ago
CVE-2023-33246-mitigation preview

CVE-2023-33246-mitigation

GitHubpavilionq/cve-2023-33246-mitigation
cloud-securitycode-analysisexploitation+2
12 years ago
veeam-cve-2023-27532-mock preview

veeam-cve-2023-27532-mock

GitHubyunus-a1i/veeam-cve-2023-27532-mock
cloud-securityexploitationpenetration-testing+3
8 months ago
ingressnightmare-detection-poc preview

ingressnightmare-detection-poc

GitHubm-q-t/ingressnightmare-detection-poc

Proof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.

cloud-securityexploitationmisconfiguration+3
1 year ago
Previous1…456…10Next