Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
33 results
wsvuls preview

wsvuls

GitHubanouarbensaad/wsvuls

CLI website vulnerability scanner that detects outdated server software, insecure HTTP headers, and extracts Cloudflare IP/port data with performance…

crawlerinformation-gatheringvulnerability-scanners+1
57
4 years ago
firebase preview
Archived

firebase

GitHubfrancesc-h/firebase

Exploiting misconfigured firebase databases

crawlerdata-exfiltrationdns-subdomain-enumeration+5
1247 years ago
Egyscan preview

Egyscan

GitHubdragonked2/egyscan

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…

crawlerinformation-gatheringpenetration-testing+4
3011 day ago
CVE-2018-20555 preview

CVE-2018-20555

GitHubfs0c131y/cve-2018-20555

Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555

crawlerexploitationinformation-gathering+3
717 years ago
vulnx preview

vulnx

GitHubanouarbensaad/vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform…

crawlerdns-analysisexploit-frameworks+5
2.1k4 years ago
nuclei-wordfence-cve preview

nuclei-wordfence-cve

GitHubtopscoder/nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

crawlerexploitationinformation-gathering+3
1.3k0 days ago
cve-collector preview

cve-collector

GitHubpassword123456/cve-collector

Automated CVE collector that crawls cvedetails.com, parses HTML for vulnerabilities with CVSS ≥ 6, and stores results in a delimiter-based file…

crawlerinformation-gatheringthreat-intelligence+1
602 years ago
cve-2026-15748 preview

cve-2026-15748

GitHubyora1928/cve-2026-15748

Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.

crawlerexploitationinformation-gathering+4
22 days ago
PwnXSS preview

PwnXSS

GitHubpwn0sec/pwnxss

PwnXSS: Vulnerability (XSS) scanner exploit

crawlervulnerability-analysisweb-security+1
8175 years ago
webvulscan preview

webvulscan

GitHubdermotblair/webvulscan

Web Application Vulnerability Scanner.

crawlerpenetration-testingvulnerability-scanners+2
15111 years ago
jshole preview

jshole

GitHubcallforpapers-source/jshole

A JavaScript components vulnerability scanner, based on RetireJS

crawlervulnerability-scannersweb-security
366 years ago
Bashter preview
Archived

Bashter

GitHubzerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

crawlermisconfigurationpenetration-testing+3
594 years ago
RED_HAWK preview

RED_HAWK

GitHubtuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

crawlerdns-analysisinformation-gathering+5
3.7k5 years ago
crawlergo preview

crawlergo

GitHubqianlitp/crawlergo

A powerful browser crawler for web vulnerability scanners

crawlerinformation-gatheringreconnaissance+2
3.0k1 year ago
vigolium preview

vigolium

GitHubvigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

ai-securityapi-security-testingauthentication+9
1.0k1 day ago
DarkAngel preview

DarkAngel

GitHubbywalks/darkangel

Automated white-hat vulnerability scanner that monitors HackerOne and Bugcrowd assets, performs subdomain enumeration, crawling, fingerprinting, and…

crawlerinformation-gatheringpenetration-testing+3
6073 years ago
JCS preview

JCS

GitHubthem4hd1/jcs

Joomla Vulnerability Component Scanner

crawlerinformation-gatheringpenetration-testing+2
627 years ago
r3con preview

r3con

GitHubthenurhabib/r3con

Multi-functional Web Recon & Vulnerability Scanner Tool

crawlerdns-analysisinformation-gathering+5
344 years ago
Previous12Next