Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

836 results

how_to_become_a_malware_analyst

pinksawtooth/how_to_become_a_malware_analyst

Curated guide to becoming a malware analyst, covering essential knowledge, reverse engineering, analysis tools, and LLM-assisted learning with…

binary-analysisctfcurated-resources+7

279

4 days ago

CVE-2026-73786

promasu/cve-2026-73786

Placeholder repository intended to host proof-of-concept code and research findings for CVE-2026-73786; currently contains no technical content.

curated-resourcesexploitationpapers-research+2

2 days ago

Dark_Ledger

gmh5225/dark_ledger

A repository preserving darknet market data, including vendor lists, PGP keys, listings, and more for research & intelligence purposes.

curated-resourcesinformation-gatheringosint+1

1 year ago

firmware-reverse-engineering

orbitcurve/firmware-reverse-engineering

Agent skills for firmware extraction, static analysis, Ghidra reverse engineering, emulation, and security reporting, packaged for Claude Code and…

binary-analysiscurated-resourcesdynamic-analysis-sandboxing+5

504 days ago

hdwebmobile-booking-appointments

htrxuan/hdwebmobile-booking-appointments

Sell bookable services and appointments through WooCommerce -- closes CVE-2026-2931 by construction.

authentication-authorizationcurated-resourceseducation+2

4 days ago

gha-lab-00d54c717d

pvharmo2/gha-lab-00d54c717d

Security-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f

curated-resourcesdevsecopseducation+2

5 days ago

ai-tool-poisoning-guard

geeksikhsecurity/ai-tool-poisoning-guard

Free security-baseline rule for Claude Code, Codex, and Cursor: treats MCP tool descriptions as untrusted input (OWASP MCP Top 10 MCP03,…

ai-securitycode-analysiscurated-resources+2

5 days ago

gha-lab-8aba6b05dc

pvharmo2/gha-lab-8aba6b05dc

Security-research lab reproducing CVE-2026-45132 (pwn request via pull_request_target chart-name injection in generate-schema.yaml) — snapshot of…

cloud-securitycurated-resourceseducation+3

5 days ago

gha-lab-5bce203f66

pvharmo2/gha-lab-5bce203f66

Security-research lab: reproduction of CVE-2026-41249 (GHSA-q58j-g3f4-h26h) — pull_request_target pwn request in .github/workflows/static.yml,…

curated-resourcesdevsecopseducation+2

5 days ago

CVE-2026-58138

0xblackash/cve-2026-58138

Defensive security research repository detailing CVE-2026-58138, an unauthenticated RCE in Conductor via GraalVM. Provides technical analysis,…

curated-resourcesdefensive-toolseducation+3

16 days ago

advisory-database

pypa/advisory-database

Community-owned database of security advisories for Python packages on PyPI, providing structured vulnerability data in OSV format for integration…

curated-resourcesdevsecopssupply-chain-security+2

3688 days ago

Aether

fknmega/aether

Autonomous AI Driven OSINT & security-research desktop agent (macOS/Windows) that builds a live knowledge graph. Authorized use only

ai-securityctfcurated-resources+5

1516 days ago

linux-insides

0xax/linux-insides

A book-in-progress about the Linux kernel and its insides.

binary-analysiscurated-resourceseducation+2

33.5k2 days ago

CVE-2026-6471

0xblackash/cve-2026-6471

Non-destructive PostgreSQL vulnerability checker for CVE-2026-6471. Audits server version and REPLICATION privileges to identify exposure to logical…

configuration-auditingcurated-resourcesdatabase-security+2

7 days ago

cyberthreat_DBSproject

sohanbhowmik/cyberthreat_dbsproject

Structured threat intelligence dataset for tracking CVE vulnerabilities with CVSS scores, KEV status, and publication dates.

curated-resourcesthreat-intelligencevulnerability-analysis

7 days ago

research-cve-2026-85649

chewkeanho/research-cve-2026-85649

[MIRROR] The CVE-2026-85649 Security Research Publication.

authenticationcurated-resourceseducation+3

7 days ago

gha-lab-3f1ff30e9c

pvharmo2/gha-lab-3f1ff30e9c

Authorized security-research lab reproducing CVE-2026-31852 (jellyfin/jellyfin-ios pull_request_target pwn in code-quality.yml) — isolated snapshot,…

cloud-securitycurated-resourcesdevsecops+2

7 days ago

gha-lab-ca4fa82ac5

pvharmo2/gha-lab-ca4fa82ac5

Security-research lab: reproduction of CVE-2026-29075 (GHSA-3j55-5q6x-2h48) in mesa/mesa benchmarks.yml pull_request_target workflow — single-commit…

curated-resourcesdevsecopseducation+3

7 days ago

Previous12…47 Next