Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
639 results
oletools preview

oletools

GitHubdecalage2/oletools

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

code-analysisdigital-forensicsforensics+3
3.4k
7 months ago
bip preview

bip

GitHubsynacktiv/bip

Object-oriented Python API to simplify interaction with IDA for reverse engineering, enabling plugin development and automation of disassembly…

binary-analysiscode-analysisreverse-engineering+2
2054 years ago
log4j_scanner preview

log4j_scanner

GitHubdbzoo/log4j_scanner

Filesystem scanner for Log4Shell (CVE-2021-44228) and related CVEs. Detects vulnerable JAR files via hash matching and class presence. Runs…

code-analysisdevsecopsincident-response+3
44 years ago
hexora preview

hexora

GitHubrushter/hexora

Static analysis of malicious Python code

code-analysisioc-managementmachine-learning+4
1711 day ago
CVE-2007-4559 preview

CVE-2007-4559

GitHubdavidholiday/cve-2007-4559

Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…

code-analysiseducationexploitation+3
2 years ago
log4shell-finder preview

log4shell-finder

GitHubhynekpetrak/log4shell-finder

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305,…

code-analysismisconfigurationstatic-analysis+3
393 years ago
log4shell preview

log4shell

GitHubhozyx/log4shell

Applications that are vulnerable to the log4j CVE-2021-44228/45046 issue may be detectable by scanning jar, war, ear, zip files to search for the…

code-analysisdevsecopsstatic-analysis+3
4 years ago
CVE-2025-6440 preview

CVE-2025-6440

GitHubsahmsec/cve-2025-6440

CVE-2025-6440

code-analysiseducationexploitation+4
14 months ago
CVE-2018-8097 preview

CVE-2018-8097

GitHubsilentvoid13/cve-2018-8097

CVE-2018-8097 PoC

code-analysisexploitationpenetration-testing+2
13 years ago
CVE-2026-31431-old-python preview

CVE-2026-31431-old-python

GitHubgrishinpv/cve-2026-31431-old-python

Provides a ctypes wrapper for the splice syscall to enable exploitation of CVE-2026-31431 on Python versions below 3.10, tested on Python 3.7.3.

binary-exploitationcode-analysisexploitation+1
4 months ago
Spring4Shell-Python-Firewall-POC preview

Spring4Shell-Python-Firewall-POC

GitHubnickops87/spring4shell-python-firewall-poc

Proof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking…

code-analysisdefensive-toolseducation+3
10 months ago
Intensio-Obfuscator preview

Intensio-Obfuscator

GitHubhnfull/intensio-obfuscator

Obfuscate a python code 2.x and 3.x

code-analysiseducationreverse-engineering+1
6476 years ago
CVE-2019-6690 preview

CVE-2019-6690

GitHubbrianwrf/cve-2019-6690

It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 (CVE-2019-6690).

code-analysisexploitationpenetration-testing+2
67 years ago
exploit-js2py preview

exploit-js2py

GitHubreleaseown/exploit-js2py

The CVE-2024-28397 vulnerability affects versions of js2py up to v0.74, a Python library that allows JavaScript code to be executed within the Python…

code-analysiseducationexploitation+3
18 months ago
py_certificate_extractor preview

py_certificate_extractor

GitHubpassword123456/py_certificate_extractor

Extracts and exports certificate information from digitally signed PE files using Python and pefile, enabling forensic analysis of code-signing…

code-analysisdigital-forensicsmalware-analysis+1
3 years ago
Langflow-CVE-2025-3248-Multi-target preview

Langflow-CVE-2025-3248-Multi-target

GitHubill-deed/langflow-cve-2025-3248-multi-target

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…

code-analysisexploitationpenetration-testing+3
1 year ago
paimei preview

paimei

GitHubopenrce/paimei

A reverse engineering framework written in Python.

binary-analysiscode-analysisdebuggers+6
50410 years ago
reposcanner preview

reposcanner

GitHubdionach/reposcanner

Python script to scan Git repos for interesting strings

code-analysisdevsecopsinformation-gathering+1
1606 years ago
Previous12…36Next