Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
117 results
ModSecurity preview

ModSecurity

GitHubowasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

anti-botapi-securitydefensive-tools+7
9.8k
1h 30m ago
zentinel preview

zentinel

GitHubzentinelproxy/zentinel

A security-first reverse proxy built to guard the free web.

ai-securityapi-securityauthentication-authorization+6
1207h 12m ago
scan preview

scan

GitHubatomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

binary-analysiscode-analysisdefensive-tools+9
22321h 31m ago
cover preview

cover

GitHubdavidcarliez/cover

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

ai-securityapi-securitydefensive-tools+3
581 day ago
vedas-signatures preview

vedas-signatures

GitHubarpsyndicate/vedas-signatures

VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 15k CVEs

curated-resourcesdefensive-toolsintrusion-detection+8
231 day ago
coraza preview

coraza

GitHubcorazawaf/coraza

Go-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…

api-securityapi-security-testingdefensive-tools+7
4.0k2 days ago
CVE-2026-101259 preview

CVE-2026-101259

GitHuboscerd/cve-2026-101259

Runnable proof-of-concept reproducer for CVE-2026-101259, demonstrating error-message disclosure in Apache Camel camel-coap consumers on Spring Boot…

defensive-toolseducationinformation-gathering+3
2 days ago
CVE-2026-95629 preview

CVE-2026-95629

GitHuboscerd/cve-2026-95629

Runnable proof-of-concept reproducer for CVE-2026-95629, a path-traversal flaw in Apache Camel camel-docling where the output-path header reaches…

code-analysisdefensive-toolseducation+4
2 days ago
CVE-2026-95628 preview

CVE-2026-95628

GitHuboscerd/cve-2026-95628

Runnable proof-of-concept reproducer for CVE-2026-95628, an absolute-path validation gap in Apache Camel camel-docling, with Spring Boot and Quarkus…

defensive-toolseducationexploitation+2
2 days ago
CVE-2026-95664 preview

CVE-2026-95664

GitHuboscerd/cve-2026-95664

Runnable Spring Boot and Quarkus reproducer for CVE-2026-95664, demonstrating Simple expression injection via the CamelAwsS3Key header in…

defensive-toolseducationexploitation+2
2 days ago
CVE-2026-90885 preview

CVE-2026-90885

GitHuboscerd/cve-2026-90885

Runnable proof-of-concept reproducer for CVE-2026-90885, an XXE (CWE-611) in Apache Camel camel-saxon XQuery, with Spring Boot and Quarkus builds and…

defensive-toolseducationexploitation+2
2 days ago
xalgorix preview

xalgorix

GitHubxalgorix/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

ai-securitydefensive-toolsexploitation+8
1.3k2 days ago
tomcat-rewrite-ns-loop preview

tomcat-rewrite-ns-loop

GitHubabraxas/tomcat-rewrite-ns-loop

Apache Tomcat 11.0.27 - High - Remote - DoS - RewriteValve [NS] worker pin

defensive-toolsexploitationlabs-practice+3
22 days ago
CVE-2026-111497 preview

CVE-2026-111497

GitHub0xblackash/cve-2026-111497

Advisory and proof-of-concept toolkit for CVE-2026-111497 (Node2Shell), a Brotli heap overflow in Node.js, with trigger scripts, version checker, and…

defensive-toolseducationexploitation+6
15 days ago
fil-c preview

fil-c

GitHubpizlonator/fil-c

Fil-C: completely compatible memory safety for C and C++

defensive-toolsdynamic-code-analysisvulnerability-analysis
3.9k5 days ago
Antibody preview

Antibody

GitLablsudoko/antibody

GitLab Duo DevSecOps loop where a second AI re-attacks every AI-written fix, saving each successful bypass as a permanent antibody replayed in CI and…

adversarial-attackai-securitydefensive-tools+9
16 days ago
node2shell-scanner preview

node2shell-scanner

GitHubassetnote/node2shell-scanner

High fidelity detection mechanism for node2shell (CVE-2026-111497)

defensive-toolsreconnaissancevulnerability-analysis+3
536 days ago
akca preview

akca

GitHubakha-security/akca

Evidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.

api-security-testingdefensive-toolsdynamic-analysis-sandboxing+9
2497 days ago
Previous1234567Next