Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

30 results

enum4linux-ng

cddmp/enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security…

ctfinformation-gatheringnetwork-security+2

1.6k

6 months ago

bscan

welchbj/bscan

an asynchronous target enumeration tool

ctfinformation-gatheringnetwork-mapping+4

2517 years ago

autoenum

gr1mmie/autoenum

Automated service enumeration tool that runs parallel nmap scans, detects services, and launches targeted enumeration tools (nikto, gobuster,…

ctfinformation-gatheringnetwork-mapping+4

2303 years ago

zenbuster

0xtas/zenbuster

Multi-threaded URL enumeration/content-discovery tool in Python.

ctfinformation-gatheringpenetration-testing+2

1072 years ago

pspy

dominicbreuker/pspy

Monitor linux processes without root permissions

ctfinformation-gatheringpenetration-testing+2

6.2k5 months ago

recon

knowledge-wisdom-understanding/recon

Enumerate a target Based off of Nmap Results

ctfdns-analysisdns-subdomain-enumeration+9

762 years ago

OFFPORT_KILLER

th3xace/offport_killer

Automates service identification behind manually discovered ports using NMAP, IANA, and Linux databases. Useful for penetration testing, CTFs, and…

ctfinformation-gatheringnetwork-security+3

505 years ago

PayloadsAllTheThings

swisskyrepo/payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ctfcurated-resourceseducation+8

80.4k16 days ago

AutoRecon

autorecon/autorecon

Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

ctfinformation-gatheringnetwork-mapping+3

6.1k9 months ago

cloudgoat

rhinosecuritylabs/cloudgoat

Vulnerable-by-design AWS deployment tool for hands-on cloud security training. Deploys curated CTF scenarios to practice IAM enumeration, privilege…

cloud-securityctfeducation+5

3.7k5 months ago

linux-smart-enumeration

diego-treitos/linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

ctfinformation-gatheringpenetration-testing+2

4.0k3 months ago

linuxprivchecker

sleventyeleven/linuxprivchecker

Local Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…

ctfeducationinformation-gathering+3

1.8k5 years ago

WAES

shiva108/waes

Automated web enumeration and reconnaissance platform orchestrating nmap, nikto, gobuster, and other tools into a unified pipeline for CTF, bug…

ctfeducationinformation-gathering+7

707 months ago

Windows-Privilege-Escalation-Notes

saisathvik1/windows-privilege-escalation-notes

Educational handbook on Windows privilege escalation: enumeration, kernel and service exploits, registry misconfigurations, and credential harvesting.

ctfeducationexploitation+5

594 years ago

IkeAbuser

randomuser1983/ikeabuser

A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway.

ctfeducationinformation-gathering+5

32 months ago

THM-MagnusBilling-CVE-2023-30258-Exploit

cyb3rk0ala/thm-magnusbilling-cve-2023-30258-exploit

Step-by-step walkthrough exploiting CVE-2023-30258 (MagnusBilling RCE) and escalating privileges via fail2ban misconfiguration on a TryHackMe lab.…

command-and-controlctfeducation+7

15 days ago

CVE-2015-1328

fernandocassiodev/cve-2015-1328

Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…

binary-exploitationctfeducation+3

1 month ago

Zimbra

jam620/zimbra

Educational walkthrough of CVE-2022-27925 unauthenticated RCE exploitation on Zimbra Collaboration Suite, including mass target enumeration, PoC…

ctfeducationexploitation+3

83 years ago

Previous12 Next