Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1762 results
clawguard preview

clawguard

GitHubsafeagent-beihang/clawguard

Enterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…

ai-securityanomaly-detectioncode-analysis+5
50
5 months ago
CVE-2026-77262 preview

CVE-2026-77262

GitHubromain-deperne/cve-2026-77262

Proof-of-concept exploit for arbitrary file read in mcp-atlassian via path traversal in confluence_upload_attachment, with analysis and reproduction…

code-analysisexploitationpenetration-testing+2
1 day ago
ai-tool-poisoning-guard preview

ai-tool-poisoning-guard

GitHubgeeksikhsecurity/ai-tool-poisoning-guard

Free security-baseline rule for Claude Code, Codex, and Cursor: treats MCP tool descriptions as untrusted input (OWASP MCP Top 10 MCP03,…

ai-securitycode-analysiscurated-resources+2
1 day ago
CVE-2026-84645 preview

CVE-2026-84645

GitHubmhtsec/cve-2026-84645

Jenkins PersistenceRoot Deserialization RCE (SECURITY-3972) — PoC & analysis. Requires Item/Configure; affects weekly <= 2.579 / LTS <= 2.568.2

code-analysisexploitationpenetration-testing+3
3 days ago
zairo preview

zairo

GitHubiamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

ai-securitycode-analysisdevsecops+3
77 days ago
CVE-2026-4813 preview

CVE-2026-4813

GitHubtrachinus/cve-2026-4813

Proof-of-concept exploit for authenticated remote code execution via XSLT injection in Lutece Core, demonstrating command execution through crafted…

code-analysisexploitationpenetration-testing+2
5 days ago
evm-audit-helpers preview

evm-audit-helpers

GitLabdannydoodlesstory/evm-audit-helpers

Collection of Solidity snippets and Foundry scripts for smart contract security audits

code-analysiscurated-resourcesdevsecops+3
3 days ago
SAFE preview

SAFE

GitHubnanda-rani/safe

A contextual security auditing system for research artifacts

ai-securitycode-analysiseducation+2
17 days ago
javascript-obfuscator preview

javascript-obfuscator

GitHubjavascript-obfuscator/javascript-obfuscator

Obfuscates JavaScript and Node.js code with variable renaming, string encryption, control flow flattening, and anti-debugging to protect source code…

code-analysiscryptographydefensive-tools+3
16.2k16 days ago
CVE-2024-21546 preview

CVE-2024-21546

GitHubdigitalsurgn/cve-2024-21546

Automated exploit toolkit and detection template for CVE-2024-21546, an unauthenticated RCE in UniSharp Laravel Filemanager, with WAF evasion and…

code-analysisexploitationpayload-development+4
5 days ago
CVE-2026-78071 preview

CVE-2026-78071

GitHubtoanln-cov/cve-2026-78071

Stored XSS via Location Title in DPCalendar Free

code-analysisexploitationvulnerability-analysis+2
5 days ago
LinusWare-Source-Code-Internal preview

LinusWare-Source-Code-Internal

GitHubtekkenbugattii/linusware-source-code-internal

Reverse-engineered runtime engine for Roblox/Luau with VM hooking, opcode remapping, capability escalation, and UNC script environment for executing…

binary-analysiscode-analysisexploitation+3
38 days ago
JObfuscator preview

JObfuscator

GitHubpelock/jobfuscator

Obfuscates Java source code to protect against reverse engineering, decompilation, and IP theft. Renames variables/methods, encrypts strings, and…

code-analysiscryptographyreverse-engineering+1
691 month ago
npm-demo preview

npm-demo

GitHubalonnavon/npm-demo

Browser demo: EJS template injection (CVE-2022-29078) with Seal Security remediation

code-analysiseducationvulnerability-analysis+2
6 months ago
CVE-2026-38192 preview

CVE-2026-38192

GitHubming1700/cve-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability

code-analysisexploitationpenetration-testing+2
38 days ago
AutoIt-Obfuscator preview

AutoIt-Obfuscator

GitHubpelock/autoit-obfuscator

Obfuscates AutoIt scripts to protect source code from analysis, reverse engineering, and decompilation using advanced obfuscation and polymorphic…

code-analysiscryptographyreverse-engineering
512 months ago
lua-ffi-libinjection preview

lua-ffi-libinjection

GitHubp0pr0ck5/lua-ffi-libinjection

LuaJIT FFI bindings for libinjection, providing SQL injection and XSS detection with context-specific APIs for web application security.

api-securitycode-analysisstatic-analysis+2
388 years ago
PowerShell-Pro-Obfuscator-Python preview

PowerShell-Pro-Obfuscator-Python

GitHubpelock/powershell-pro-obfuscator-python

Automate PowerShell script source code obfuscation & virtualization with a flexible Web API for Python (pip package).

code-analysisscripting-automationutilities-frameworks
11 month ago
Previous12…98Next