Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

190 results

CVE-2026-9082

0xblackash/cve-2026-9082

CVE-2026-9082

curated-resourcesdatabase-securityeducation+2

15 months ago

CVE-2026-33824

kaleth4/cve-2026-33824

In-depth analysis of CVE-2026-33824, a critical Windows IKE remote code execution vulnerability, covering exploitation techniques, detection…

binary-exploitationcurated-resourceseducation+4

26 months ago

cve-2026-31431

vasyapokemon/cve-2026-31431

Research and detection toolkit for Linux kernel LPE CVE-2026-31431, including exploit analysis, YARA rules, auditd/Falco detection, patching guide,…

curated-resourcesdigital-forensicseducation+8

6 months ago

CVE-2026-20127-Exploit-Extension

anuththara2007-w/cve-2026-20127-exploit-extension

Offline browser extension providing defensive analysis and detection guidance for CVE-2026-20127, with packet visualization, IOC extraction, and…

curated-resourcesdefensive-toolseducation+6

3 months ago

research-cve-2025-68971

chewkeanho/research-cve-2025-68971

[MIRROR] Full CVE-2025-68971 Security Vulnerability Research Report.

cryptographycurated-resourceseducation+2

6 months ago

soc-analyst-hub

cross-samuel1/soc-analyst-hub

Free, offline SOC Analyst Hub for Tier 1 — IR checklists, alert triage playbooks, threat hunting queries & analyst onboarding. Single HTML file, no…

curated-resourceseducationincident-response+6

17 months ago

Scanners-for-CVE-2020-0796-Testing

dhoomralochana/scanners-for-cve-2020-0796-testing

Scanners List - Microsoft Windows SMBv3 Remote Code Execution Vulnerability (CVE-2020-0796)

curated-resourcesexploitationinformation-gathering+3

16 years ago

coeus-ci

opfour/coeus-ci

Competitive Intelligence from public data sources. Named after Coeus, the Greek Titan of the inquisitive mind.

curated-resourcesdns-analysiseducation+6

4 months ago

sharepoint-toolshell-micro-postmortem

cameloo1/sharepoint-toolshell-micro-postmortem

Reproducible incident micro-postmortem for on-prem Microsoft SharePoint “ToolShell” (CVE-2025-53770): ATT&CK snapshot, “logs that matter” table,…

curated-resourceseducationforensics+7

110 months ago

Blackash-CVE-2017-0144

firetemple/blackash-cve-2017-0144

CVE-2017-0144

curated-resourceseducationexploitation+6

10 years ago

ai-bot-ip-ranges

rxerium/ai-bot-ip-ranges

Official IP ranges for AI bot crawlers (OpenAI, Anthropic, Google, Microsoft, Perplexity). Weekly auto-updates.

crawlercurated-resourcesdefensive-tools+2

5 months ago

maritime-security-paper

jason996/maritime-security-paper

Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations

curated-resourcesdefensive-toolsdns-analysis+8

11 months ago

CVE-2026-39813

0xblackash/cve-2026-39813

CVE-2026-39813

curated-resourceseducationexploitation+3

6 months ago

2024InformationSecurityEngineer

jas502n/2024informationsecurityengineer

2024年信息安全工程师、2024InformationSecurityEngineer

android-securitycurated-resourceseducation+4

11 year ago

My-Sigma-Rule-Collection

17patmaks/my-sigma-rule-collection

Sigma Rule for CVE-2025-49666

curated-resourceseducationintrusion-detection+3

7 months ago

CS50FinalProject

m1lo25/cs50finalproject

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

curated-resourceseducationincident-response+3

11 year ago

eternal-codex

dwulf/eternal-codex

My manifesto, and stories, images, and phun stuff

ai-securitycryptographycurated-resources+5

0 years ago

bug-bounty-reports-desai-vinayak

desaivinayak449/bug-bounty-reports-desai-vinayak

Bug bounty and vulnerability research reports by Desai Vinayak — includes CVE-2023-50290 (Apache Solr) and Zscaler subdomain takeover findings.

cloud-securitycurated-resourcesdns-analysis+6

0 years ago

Previous 1…91011 Next