Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
192 results
CRLF-Injection-Payloads preview

CRLF-Injection-Payloads

GitHubcujanovic/crlf-injection-payloads

Collection of CRLF injection payloads gathered from bug bounty reports, used as a reference for testing HTTP header and response splitting…

curated-resourcespayload-generationpenetration-testing+3
227
2 years ago
Open-Redirect-Payloads preview

Open-Redirect-Payloads

GitHubcujanovic/open-redirect-payloads

Curated collection of open redirect payloads sourced from bug bounty reports, with a shell script to substitute a target whitelisted domain for…

curated-resourcespayload-generationpenetration-testing+3
6712 years ago
initial-access-community preview

initial-access-community

GitHubvulncheck-oss/initial-access-community

Go-based exploits for unauthenticated network vulnerabilities in routers, VPNs, appliances, and IoT, bundled with PCAPs, Suricata/Snort/YARA/Sigma…

curated-resourcesembedded-systems-securityexploitation+7
214 days ago
lab preview

lab

GitHubchakshugupta13/lab

Code artifacts from research paper implementations

cryptographycurated-resourceseducation+2
6 days ago
vulnsearch preview

vulnsearch

GitHubdomssilva/vulnsearch

A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books,…

curated-resourceseducationinformation-gathering+5
1113 years ago
advisory-database preview

advisory-database

GitHubgithub/advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

curated-resourcesdefensive-toolsdevsecops+5
2.5k7 days ago
malware-iocs preview

malware-iocs

GitHubdoctorwebltd/malware-iocs

Curated Indicators of Compromise (IOCs) from Doctor Web malware investigations, published for threat intelligence, detection engineering, and…

curated-resourcesforensicsincident-response+4
2457 days ago
yara-rules preview

yara-rules

GitHubinquest/yara-rules

Collection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.

curated-resourcesdefensive-toolsincident-response+5
3894 years ago
DiagSafe preview

DiagSafe

GitHubtencent-hunyuan/diagsafe

Diagnostic LLM safety benchmark with 3,489 bilingual prompts, an 84-label taxonomy, and prompt-level rubric judging for explainable, fine-grained…

ai-securitycurated-resourceseducation+5
334 days ago
veiled-eye preview

veiled-eye

GitHubemrekybs/veiled-eye

OSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.

curated-resourcesemail-harvestinginformation-gathering+6
9 days ago
Consensus-OSINT preview

Consensus-OSINT

GitHubosint-experts-society/consensus-osint

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed…

curated-resourcesemail-harvestingemail-security+5
19916 days ago
ad_attack_architecture preview

ad_attack_architecture

GitHubkypvas/ad_attack_architecture

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

curated-resourceseducationidentity-management+7
442 months ago
red-team-map preview

red-team-map

GitHubkypvas/red-team-map

Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact

command-and-controlcurated-resourceseducation+7
371 month ago
vulnrichment preview

vulnrichment

GitHubcisagov/vulnrichment

A repo to conduct vulnerability enrichment.

curated-resourcesdefensive-toolsinformation-gathering+5
87912h 19m ago
Cyber-Library preview

Cyber-Library

GitHubcyber-courses/cyber-library

Community-maintained Markdown knowledge base covering cybersecurity foundations, offensive and defensive practice, governance, threat intelligence,…

curated-resourcesdefensive-toolseducation+7
18412 days ago
chromium-hardening-guide preview

chromium-hardening-guide

GitHubrknf404/chromium-hardening-guide

Harden chromium (somewhat) for privacy and security (and performance)

configuration-auditingcurated-resourcesdefensive-tools+3
1802 days ago
advisories preview

advisories

GitHublinnemanlabs/advisories

Curated Linux security advisories with CVE write-ups and reproducible proof-of-concept exploits covering local privilege escalation and authorization…

curated-resourcesexploitationpapers-research+1
11 month ago
security-advisories preview

security-advisories

GitHubkiteworks/security-advisories

Publishes Kiteworks security advisories and CVE disclosures, including vulnerability details, disclosure policy, and bug bounty information for…

curated-resourcesioc-managementthreat-intelligence+1
19 months ago
Previous12…11Next