Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security

General Purpose Utilities

Indicator of Compromise (IOC) Management

OSINT (Open Source Intelligence)

Packet Sniffing & Analysis

Password Cracking

Penetration Testing Frameworks

Vulnerability Scanners

Web Vulnerability Scanners

Wi-Fi Auditing

Bluetooth Security

Container Security

Dynamic Analysis (Sandboxing)

Encryption/Decryption Tools

OSINT for Social Engineering

Password Attacks

Payload Generation

Persistence Mechanisms

Port Scanning

Static Code Analysis (SAST)

Threat Feeds & Aggregators

Vulnerability Analysis

Web Proxies & Interception

Code Analysis

DNS & Subdomain Enumeration

Dynamic Code Analysis (DAST)

Mobile App Pentesting

Scripting & Automation

Serverless Security

Shellcode

Web Application Exploitation

API Security Testing

Configuration Auditing

Data Exfiltration

Debuggers

Forensics

Information Gathering

Mobile Forensics

Network Access Control

Post-Exploitation

Security Virtualization

Utilities & Frameworks

Hardware & IoT Security

Secret Detection

Binary Analysis

Threat Intelligence

Identity & Access Management (IAM)

Supply Chain Security

Subdomain Enumeration

Email Harvesting

Learning & Education

AI-Assisted Reversing

Learning Paths & Courses

Newest Relevance Most popular Recently updated

9 results

CVE-2026-89012

faceless0x7/cve-2026-89012

Python exploit for CVE-2026-89012, a Dolibarr SQL filter denylist bypass that uses a blind-boolean oracle to extract password hashes and API keys via…

api-securitydata-exfiltrationexploitation+6

626 days ago

CVE-2025-24071

f4dee-backup/cve-2025-24071

Exploit script for CVE-2025-24071 that leaks NTLM hashes from Windows by extracting a crafted ZIP/RAR file, exploiting .library-ms file handling.…

data-exfiltrationexploitationnetwork-security+2

1 year ago

Archived

PwnedPasswordsChecker

joshuamart/pwnedpasswordschecker

Search (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)

data-exfiltrationhash-analysisinformation-gathering+2

622 years ago

DataSurgeon

drew-alleman/datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

ctfdata-exfiltrationforensics+6

9062 years ago

steamer

zxsecurity/steamer

For importing, searching, and managing public password breach data

data-exfiltrationinformation-gatheringosint+1

1622 years ago

cve-2022-31749

iveresk/cve-2022-31749

PoC checker for CVE-2022-31749 exploiting a parameter injection vulnerability in WatchGuard SSH interface to exfiltrate hashed user passwords via FTP.

authenticationdata-exfiltrationexploitation+3

14 years ago