Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

13 results

needrestart

liske/needrestart

System utility that identifies and restarts daemons using outdated libraries after package upgrades to maintain security. Supports containers and…

configuration-auditingcontainer-securitydefensive-tools+3

522

13 days ago

ldeep

franc-pentest/ldeep

In-depth ldap enumeration utility

authentication-authorizationconfiguration-auditingdns-analysis+4

6061 month ago

CVE-2026-64600

debajyoti0-0/cve-2026-64600

A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel…

configuration-auditingdefensive-toolsexploitation+3

61 month ago

s3-bucket-take-0v3r

jenderal92/s3-bucket-take-0v3r

AWS AMAZON S3 Bucket Takeover Scanner & Claim Tool

cloud-securityconfiguration-auditinginformation-gathering+4

13 months ago

cpanel-control-plane-exposure-check

sreejaputhan/cpanel-control-plane-exposure-check

Defensive exposure assessment tool for identifying externally accessible cPanel, WHM, and Webmail management interfaces related to CVE-2026-41940.

configuration-auditingdefensive-toolsnetwork-security+3

4 months ago

CVE-2026-23918

hackervlogofficial/cve-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and…

configuration-auditingdevsecopsnetwork-security+2

14 months ago

Startup-SBOM

morpheuslord/startup-sbom

A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.

cloud-securityconfiguration-auditingcontainer-security+4

175 months ago

kcatcher

the-infra-company/kcatcher

Catch what's lurking in your Kafka clusters.

authentication-authorizationcloud-securityconfiguration-auditing+6

68 months ago

authkeysync

eduardolat/authkeysync

🔐 Lightweight CLI utility designed to synchronize SSH public keys from remote URLs into local authorized_keys files

authenticationauthentication-authorizationcloud-infrastructure-security+3

289 months ago

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

titus-soc/-cve-2024-3094-vulnerability-checker-fixer-public

A lightweight utility designed to detect and remediate systems affected by CVE-2024-3094, a critical vulnerability impacting [insert affected…

configuration-auditingdevsecopsincident-response+3

0 years ago

ACEshark

t3l3machus/aceshark

ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need…

configuration-auditinginformation-gatheringpenetration-testing+4

1511 year ago

magento2-encryption-key-manager-cli

wubinworks/magento2-encryption-key-manager-cli

A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.

configuration-auditingcryptographydevsecops+3

1 year ago

Detecting-the-patch-of-CVE-2018-1010

ymgh96/detecting-the-patch-of-cve-2018-1010

C++ utility that checks Windows OS version and detects whether the patch for CVE-2018-1010 is installed using systeminfo and wmic commands.

configuration-auditinginformation-gatheringvulnerability-analysis

8 years ago