Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
935 results
autopilot-pentest-ai preview

autopilot-pentest-ai

GitHubkush-coder/autopilot-pentest-ai

Official Build & Verified Release | Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a…

ai-securitydevsecopsexploitation+7
21h 52m ago
kpatch-alma-cve-2026-99999 preview

kpatch-alma-cve-2026-99999

GitHubnsrg-fmlorg/kpatch-alma-cve-2026-99999

kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8/9 GA kernels

container-securitydefensive-toolsdevsecops+4
6 days ago
kshield preview

kshield

GitHubmc493/kshield

Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086,…

configuration-auditingcontainer-securitydefensive-tools+4
1 day ago
CVE-2026-98432 preview

CVE-2026-98432

GitHubaxisops/cve-2026-98432

Ansible role and Python script that detect Linux kernel exposure to CVE-2026-98432 and apply an nftables rule dropping inbound IPv4 SYNs carrying IP…

configuration-auditingdefensive-toolsdevsecops+5
15 days ago
cve-2026-98432-ubuntu-backport preview

cve-2026-98432-ubuntu-backport

GitHubpolikhronidi/cve-2026-98432-ubuntu-backport

Source-validated Ubuntu 6.8 backport candidate for Eric Dumazet’s upstream CVE-2026-98432 fix, with provenance and CI. Not yet compiled or…

code-analysisdevsecopsstatic-analysis+2
5 days ago
linux-cve-2026-98432-fix preview

linux-cve-2026-98432-fix

GitHubaronwang001/linux-cve-2026-98432-fix

Detect CVE-2026-98432 on the running Linux kernel and apply the official fixed kernel only on verified distributions (Debian 12/13, Amazon Linux…

configuration-auditingdefensive-toolsdevsecops+4
42 days ago
linux-tcp-uaf-cve-2026-98432 preview

linux-tcp-uaf-cve-2026-98432

GitHubjohnhsb/linux-tcp-uaf-cve-2026-98432

CVE-2026-98432 (Linux IPv4 TCP inet_opt UAF): read-only diagnostic script, no-reboot nftables/sysctl mitigations, Ansible rollout and response guide…

configuration-auditingdefensive-toolsdevsecops+6
1 day ago
mitigate-cve-2026-98432 preview

mitigate-cve-2026-98432

GitHubmatthew-hollick/mitigate-cve-2026-98432

Puppet module that deploys a temporary UFW/iptables rule dropping IPv4 TCP packets with IPv4 options to mitigate CVE-2026-98432 until vendor kernel…

configuration-auditingdefensive-toolsdevsecops+4
2 days ago
ansible-ezcve preview

ansible-ezcve

GitHubmrjoshuap/ansible-ezcve

Ansible role that audits Linux hosts for CVE-2026-98432, checking kernel versions, MPTCP status and listeners, and producing per-host risk reports…

configuration-auditingdefensive-toolsdevsecops+5
1 day ago
CVE-2026-97229-GitLab-CI-CD-Regex-Compiler-RCE preview

CVE-2026-97229-GitLab-CI-CD-Regex-Compiler-RCE

GitHubampedwastaken/cve-2026-97229-gitlab-ci-cd-regex-compiler-rce

Technical investigation of CVE-2026-97229 (GitLab CI/CD regex RCE): local patched GitLab lab, CI Lint API checks, version auditing, and defensive…

configuration-auditingdefensive-toolsdevsecops+4
122 days ago
next-security-check preview

next-security-check

GitHubamansin001/next-security-check

Check a Next.js project against the October 14, 2026 security advisories (CVE-2026-96889, use cache RCE, Server Actions DoS). No dependencies.

devsecopsstatic-analysissupply-chain-security+3
8 days ago
braces-fork preview

braces-fork

GitHubscastillo-jp/braces-fork

Temporary fork of braces with a minimal security patch for CVE-2026-93687, created only to validate dependency override behavior and Fortify/FoD…

devsecopsstatic-code-analysissupply-chain-security+1
1 month ago
CVE-2026-91403-eMudhra-Java-Scanner preview

CVE-2026-91403-eMudhra-Java-Scanner

GitHubfahrihfatahilah/cve-2026-91403-emudhra-java-scanner

Checks Java and system trust stores for eMudhra CA certificates affected by CVE-2026-91403 by probing TLS test hosts, then reports vulnerable entries…

authenticationconfiguration-auditingcontainer-security+5
111 days ago
prescryb preview

prescryb

GitHubkonstruktoid/prescryb

MCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.

ai-securityconfiguration-auditingdefensive-tools+4
13 days ago
penthera preview

penthera

GitHubdanoszz/penthera

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

ai-securitycode-analysisconfiguration-auditing+7
784 days ago
push-guard preview

push-guard

GitHubdragon-lady/push-guard

Local Git pre-push hook and filesystem scanner that detects likely secret leaks, redacts matched values, and blocks pushes without telemetry or…

configuration-auditingdefensive-toolsdevsecops+4
12 days ago
work1-secure-api preview

work1-secure-api

GitHubght657/work1-secure-api

HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis

api-securityauthentication-authorizationdevsecops+7
7 days ago
TWAPT preview

TWAPT

GitHubmoisestapia/twapt

Deploy your own lab of web application penetration testing with docker and docker-compose, webgoat, dvwap, bwapp and Juice Shop

container-securitydevsecopseducation+5
755 years ago
Previous12…52Next