Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

85 results

CVE-2025-55182

rix4uni/cve-2025-55182

A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.

command-and-controlexploitationinformation-gathering+4

5 months ago

r2s

zamdevio/r2s

Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF…

command-and-controlexploitationinformation-gathering+5

211 months ago

Archived

melting-cobalt

splunk/melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

command-and-controlinformation-gatheringnetwork-security+3

1694 years ago

SteppingStones

nccgroup/steppingstones

Web-based red team activity logging, reporting, and situational awareness tool with Cobalt Strike and BloodHound integration.

command-and-controlinformation-gatheringpenetration-testing+3

24327 days ago

BADministration

thundergunexpress/badministration

Offensive tool for exploiting management applications (SolarWinds Orion, McAfee ePO) via non-technical vulnerabilities. Enables client enumeration,…

command-and-controlexploitationinformation-gathering+6

1287 years ago

CVE-2024-49369

quantum-sicarius/cve-2024-49369

Exploit tool for CVE-2024-49369 in Icinga, enabling subnet scanning, agent takeover via JSON-RPC impersonation, arbitrary command execution, and…

command-and-controlexploitationinformation-gathering+3

21 year ago

CVE-2025-25257

imbas007/cve-2025-25257

Python-based exploit tool for CVE-2025-25257 in FortiWeb. Automates SQL injection detection, webshell upload, and remote command execution on…

command-and-controlexploitationinformation-gathering+3

11 year ago

ActiveReign

m8sec/activereign

A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

command-and-controlexploitationinformation-gathering+2

2462 years ago

redknife

yukibtc/redknife

A Swiss Army knife for offensive security.

command-and-controlinformation-gatheringpenetration-testing+4

4 days ago

ntlm_relay_gat

ad0nis/ntlm_relay_gat

Automates NTLM relay exploitation using ntlmrelayx.py for SMB share enumeration, shell execution, secrets dumping, and MSSQL command execution via…

command-and-controlexploitationinformation-gathering+5

1712 years ago

EvilOSX

marten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

command-and-controlinformation-gatheringpassword-cracking+6

2.4k5 years ago

fronthunter

st3rven/fronthunter

FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.

command-and-controlinformation-gatheringreconnaissance+2

221 year ago

MCP-God-Mode

gmh5225/mcp-god-mode

Did you ever just want it to do everything? 148 POWERFUL Infosec/Admin tools on a single MCP server.

command-and-controlhardware-iot-securityinformation-gathering+9

11 year ago

nopowershell

bitsadmin/nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

command-and-controlinformation-gatheringpost-exploitation+2

1.1k0 years ago

WMImplant

redsiege/wmimplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is…

command-and-controlinformation-gatheringlateral-movement+3

8628 years ago

EggShell

lucasjacks0n/eggshell

iOS/macOS/Linux Remote Administration Tool

command-and-controlexploitationinformation-gathering+7

1.8k8 years ago

f5-bigip-rce-cve-2020-5902

thelsa/f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

command-and-controlexploitationinformation-gathering+3

626 years ago

CVE-2026-4631-cockpit-RCE

exdev994/cve-2026-4631-cockpit-rce

Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78

command-and-controlexploitationinformation-gathering+6

3 months ago

Previous12 3 4 5 Next