Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
19 results
AutoRecon preview

AutoRecon

GitHubautorecon/autorecon

Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

ctfinformation-gatheringnetwork-mapping+3
6.1k11 months ago
bscan preview

bscan

GitHubwelchbj/bscan

an asynchronous target enumeration tool

ctfinformation-gatheringnetwork-mapping+4
2507 years ago
pspy preview

pspy

GitHubdominicbreuker/pspy

Monitor linux processes without root permissions

ctfinformation-gatheringpenetration-testing+2
6.1k8 months ago
linux-smart-enumeration preview

linux-smart-enumeration

GitHubdiego-treitos/linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

ctfinformation-gatheringpenetration-testing+2
4.0k6 months ago
enum4linux-ng preview

enum4linux-ng

GitHubcddmp/enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security…

ctfinformation-gatheringnetwork-security+2
1.6k8 months ago
dismember preview

dismember

GitHubliamg/dismember

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

ctfforensicsinformation-gathering+2
6744 years ago
autoenum preview

autoenum

GitHubgr1mmie/autoenum

Automatic Service Enumeration Script

ctfinformation-gatheringnetwork-mapping+4
2304 years ago
debugHunter preview

debugHunter

GitHubdevploit/debughunter

Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Built for bug…

ctfinformation-gatheringpenetration-testing+3
2489 months ago
zenbuster preview

zenbuster

GitHub0xtas/zenbuster

Multi-threaded URL enumeration/content-discovery tool in Python.

ctfinformation-gatheringpenetration-testing+2
1072 years ago
OFFPORT_KILLER preview

OFFPORT_KILLER

GitHubth3xace/offport_killer

This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services…

ctfinformation-gatheringnetwork-security+3
506 years ago
gtfocli preview

gtfocli

GitHubcmd-tools/gtfocli

GTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.

ctfinformation-gatheringpenetration-testing+1
1821 days ago
CVE-2012-5519 preview

CVE-2012-5519

GitHubp1ckzi/cve-2012-5519

cups-root-file-read.sh | CVE-2012-5519

ctfexploitationinformation-gathering+3
94 years ago
GoFileX preview

GoFileX

GitHubabraxas/gofilex

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

ctfinformation-gatheringpassword-attacks+5
27 days ago
php_filter_chain_oracle_poc preview

php_filter_chain_oracle_poc

GitHub4xura/php_filter_chain_oracle_poc

PoC scripts to exploit LFR (Local File Read) via PHP filters chain oracle (php://filter), especially for CTF purposes or the exploit of…

ctfexploitationinformation-gathering+3
21 year ago
ivre-wizard preview

ivre-wizard

GitHubbitburner/ivre-wizard

An interactive wizard front end for IVRE to make creating scans to the database easier.

ctfinformation-gatheringlabs-practice+3
23 years ago
ImageMagick-lfi-poc preview

ImageMagick-lfi-poc

GitHubfanbyprinciple/imagemagick-lfi-poc

Proof-of-concept exploit for CVE-2022-44268 enabling arbitrary file read via crafted PNG images processed by ImageMagick. Includes generation and…

ctfexploitationinformation-gathering+3
13 years ago
AutoPwn-Titanic.htb preview

AutoPwn-Titanic.htb

GitHubmaikneysm/autopwn-titanic.htb

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

ctfexploitationinformation-gathering+5
1 year ago
cve-2022-44268 preview

cve-2022-44268

GitHubjkobierczynski/cve-2022-44268
ctfexploitationinformation-gathering+3
1 year ago
Previous12Next