Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
23 results
tirith preview

tirith

GitHubsheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…

curated-resourcesdata-exfiltrationdevsecops+8
2.7k20 hours ago
malicious_extension_sentry preview

malicious_extension_sentry

GitHubtoborrm9/malicious_extension_sentry

Malicious Extension Database

curated-resourcesdefensive-toolseducation+6
2061 day ago
LOLDrivers preview

LOLDrivers

GitHubmagicsword-io/loldrivers

Curated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…

curated-resourceseducationforensics+5
1.8k2 days ago
APT_REPORT preview

APT_REPORT

GitHubblackorbird/apt_report

Interesting APT Report Collection And Some Special IOCs

curated-resourcesmalware-analysisthreat-intelligence
3.1k5 days ago
MaliciousBrowserExtensions preview

MaliciousBrowserExtensions

GitHubgherardofiori/maliciousbrowserextensions

This Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…

curated-resourcesdynamic-analysis-sandboxingeducation+4
3113 days ago
OWASP-Hunting preview

OWASP-Hunting

GitHubowasp/owasp-hunting

Curated collection of payloads for ethical security testing and bug bounty hunting, covering common web vulnerabilities and attack vectors.

curated-resourcespayload-generationpenetration-testing+2
11 month ago
cyber_rss preview

cyber_rss

GitHubmr-r3b00t/cyber_rss

a list of useful feeds

curated-resourcesmalware-analysisthreat-intelligence+1
994 months ago
detections preview

detections

GitHubrandomaccess3/detections

Curated repository of detection information and validation guidance for identifying malicious activity in enterprise environments.

curated-resourcesincident-responseintrusion-detection+1
515 months ago
CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass preview

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

GitHubandreassudo/cve-2026-21510-cvss-8.8-important-windows-shell-security-feature-bypass

Detailed analysis of CVE-2026-21510, a Windows Shell security feature bypass allowing silent code execution via malicious links or shortcuts.…

curated-resourceseducationexploitation+2
77 months ago
CVE-2025-56218 preview

CVE-2025-56218

GitHubsaykino/cve-2025-56218

Advisory detailing CVE-2025-56218, an unrestricted file upload vulnerability in Ascertia SigningHub allowing malicious Excel files with phishing…

curated-resourceseducationphishing+2
11 months ago
Malicious-URL-Detection-Open-Source preview

Malicious-URL-Detection-Open-Source

GitHubsevenolu7/malicious-url-detection-open-source

We collected existing open source code for malicious URL detection

curated-resourcesthreat-intelligenceweb-security
31 year ago
MalwareConfigLists preview

MalwareConfigLists

GitHubgi7w0rm/malwareconfiglists

Just some lists of Malware Configs

curated-resourcesmalware-analysisthreat-intelligence
1761 year ago
yararules preview

yararules

GitHubcraiu/yararules

Yara rulez; rules too.

curated-resourcesmalware-analysisthreat-intelligence
12 years ago
xz-utils-vuln-checker preview

xz-utils-vuln-checker

GitHubharekrishnarai/xz-utils-vuln-checker

Checker for CVE-2024-3094 where malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of…

curated-resourceseducationsupply-chain-security+2
12 years ago
malware-samples preview

malware-samples

GitHubinquest/malware-samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

curated-resourcesmalware-analysisthreat-intelligence+1
9422 years ago
malware-samples preview

malware-samples

GitHubjstrosch/malware-samples

Malware samples, analysis exercises and other interesting resources.

binary-analysiscurated-resourceseducation+3
1.7k2 years ago
VN_daily_samples preview

VN_daily_samples

GitHubm4now4r/vn_daily_samples

Daily collection of malicious samples originating from Vietnam for malware analysis, threat intelligence, and detection engineering research.

curated-resourcesmalware-analysisthreat-intelligence
62 years ago
XXE-Payloads preview

XXE-Payloads

GitHubmbadanoiu/xxe-payloads

Quick access to XXE Payloads

curated-resourcespayload-generationpenetration-testing+3
2 years ago
Previous12Next