Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

24 results

libsignal

signalapp/libsignal

Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.

cryptographyencryption-decryption-toolshardware-security+2

6.1k

2 days ago

hash-identifier

blackploit/hash-identifier

Software to identify the different types of hashes used to encrypt data and especially passwords

cryptographyhash-analysisinformation-gathering+1

6388 years ago

awesome-ctf

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

cryptographyctfcurated-resources+7

12.0k6 years ago

Archived

driftwood

trufflesecurity/driftwood

Private key usage verification

cryptographyencryption-decryption-toolspassword-cracking+2

4361 year ago

OSINT-SPY

sharadkumar97/osint-spy

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

cryptographydns-subdomain-enumerationemail-harvesting+5

1.6k6 years ago

emudhra-weak-keys

corelight/emudhra-weak-keys

A Zeek package that detects when compromised eMudhra intermediate certificates are used in TLS 1.2 and below.

cryptographydefensive-toolsincident-response+4

7 days ago

WAF_buster

viperbluff/waf_buster

Disrupt WAF by abusing SSL/TLS Ciphers

cryptographypenetration-testingwaf-bypass+1

487 years ago

certificate-ripper

hakky54/certificate-ripper

🔐 A CLI tool to extract server certificates

cryptographygeneral-purpose-utilitiesinformation-gathering+1

9473 days ago

ASSAMEE

samhaxr/assamee

AES-256 file and directory encryption tool with automatic upload to Anonfiles cloud storage, requiring a download ID for decryption and retrieval.

cloud-securitycryptographyencryption-decryption-tools

163 years ago

zte-smartlife-app-pwned

minanagehsalalma/zte-smartlife-app-pwned

ZTE SmartLife security findings leading to account takeover: 100K+ Google Play downloads and CVE-2026-86552 through CVE-2026-86555.

android-securityapi-securitycryptography+7

1 month ago

DamnVulnerableCryptoApp

damnvulnerablecryptoapp/damnvulnerablecryptoapp

An app with really insecure crypto. To be used to see/test/exploit weak cryptographic implementations as well as to learn a little bit more about…

cryptographyeducationlabs-practice+1

864 years ago

wycheproof

c2sp/wycheproof

Project Wycheproof tests crypto libraries against known attacks.

code-analysiscryptographyeducation+3

3.1k6 days ago

CryptoTester

demonslay335/cryptotester

A utility for playing with cryptography, geared towards ransomware analysis.

binary-analysiscryptographydynamic-analysis-sandboxing+6

3341 year ago

python-paddingoracle

mwielgoszewski/python-paddingoracle

A portable, padding oracle exploit API

cryptographyencryption-decryption-toolsexploitation+2

3313 years ago

cart

cybercentrecanada/cart

Python implementation of the CaRT library for (un)inerting files.

cryptographydefensive-toolsdigital-forensics+2

581 year ago

assless-chaps

sensepost/assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

cryptographyhash-analysispassword-cracking+2

1433 months ago

CVE-2023-48034

aprkr/cve-2023-48034

Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…

bluetooth-securitycryptographyembedded-systems-security+6

12 years ago

cyrus-sasl

cyrusimap/cyrus-sasl

Cyrus SASL API implementation providing client- and server-side authentication and authorization services via pluggable SASL mechanisms per RFC 4422.

authenticationauthentication-authorizationcryptography+3

1601 month ago

Previous12 Next