Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

154 results

MSSQL-Pentest-Cheatsheet

ignitetechnologies/mssql-pentest-cheatsheet

Practical MSSQL penetration testing cheat sheet covering enumeration, linked-server pivoting, privilege escalation, persistence, and command…

curated-resourcesdatabase-securityexploitation+8

270

7 months ago

The_Shelf

trustedsec/the_shelf

Retired TrustedSec Capabilities

curated-resourcesexploitationpenetration-testing+2

2469 months ago

Exploit-Index

securewithumer/exploit-index

Zero-API aggregator indexing 150k+ CVE exploits and PoCs from Exploit-DB, Nuclei, Metasploit, and CISA KEV, with EPSS/CVSS risk scoring for threat…

curated-resourcesexploitationinformation-gathering+8

962h 39m ago

NVD-Exploit-List-Ja

nomi-sec/nvd-exploit-list-ja

🔍NVD exploit & JVN(Japan Vulnerability Notes) easy description

curated-resourcesexploitationinformation-gathering+2

9317h 30m ago

PHP-binary-bugs

cfandr-github/php-binary-bugs

PHP binary bugs advisory

binary-exploitationcurated-resourcesexploitation+2

1774 years ago

AzureAttackKit

zephrfish/azureattackkit

Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

cloud-securitycurated-resourcesexploitation+6

791 year ago

security-research

mirchr/security-research

Security Research

curated-resourcesexploitationpassword-cracking+5

951 year ago

CVE-repository

orange-cyberdefense/cve-repository

🐞 Repository of CVE found by OCD people

curated-resourcesexploitationpapers-research+3

891 year ago

Heptagram

heptagrams/heptagram

This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team.

curated-resourcesexploitationpenetration-testing+1

795 years ago

research

alephsecurity/research

Research material and Proof-of-Concepts for Aleph Research Findings

curated-resourcesexploitationpapers-research+1

914 years ago

advisories

enablesecurity/advisories

Security advisories published by Enable Security

curated-resourcesexploitationpayload-development+2

448 months ago

Exploits-Archives

ishell/exploits-archives

sebug.net上面的镜像

curated-resourcesexploitationvulnerability-analysis

6412 years ago

OracleCVE

vah13/oraclecve

Vulnerabilities which found in Oracle products

curated-resourcesexploitationvulnerability-analysis

327 years ago

PoC-public

ffri/poc-public

Curated collection of proof-of-concept vulnerability exploits and research presented at security conferences such as Black Hat and CODE BLUE.

curated-resourcesexploitationvulnerability-analysis

321 year ago

PoC-AutoSync

jenderal92/poc-autosync

🧠 Automatically collects and updates public Proof-of-Concept (PoC) exploits from poc-in-github.motikan2010.net

curated-resourcesexploitationthreat-intelligence+1

41 day ago

proofs

4rdr/proofs

Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

curated-resourcesexploitationinformation-gathering+4

1210 months ago

injection-2

gmh5225/injection-2

Curated collection of Windows process injection techniques, linking write-ups on Conhost, PROPagate, KernelCallbackTable, KnownDlls poisoning and…

curated-resourcesdefensive-toolsexploitation+4

73 years ago

CVEs

buraksevben/cves

Curated collection of proof-of-concept exploits for web vulnerabilities including cross-site scripting and SQL injection, with detailed technical…

curated-resourcesexploitationpapers-research+2

102 years ago

Previous 1 234…9 Next