Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
44 results
Hundred OSINT preview

Hundred OSINT

GitLabt-beckett/h-osint

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

dns-analysiseducationemail-harvesting+7
1 month ago
CVE-2025-40778 preview

CVE-2025-40778

GitHubnehkark/cve-2025-40778

Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…

dns-analysiseducationexploitation+3
60 years ago
CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure preview

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

GitHubgeorge0papasotiriou/cve-2026-11106-dns-zone-transfer-axfr-information-disclosure

Proof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…

dns-analysiseducationexploitation+4
2 months ago
CVE-2023-50387 preview

CVE-2023-50387

GitHubpablodiz/cve-2023-50387

DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched…

dns-analysiseducationexploitation+3
1 year ago
DGA preview

DGA

GitHubandrewaeva/dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…

dns-analysiseducationmachine-learning+4
2249 years ago
LSTM-MI preview

LSTM-MI

GitHubbkcs-hust/lstm-mi

A LSTM based framework for handling multiclass imbalance in DGA botnet detection

dns-analysiseducationmachine-learning+3
226 years ago
zynos-attacker preview

zynos-attacker

GitHubnasroabd/zynos-attacker

ZynOS tool for automated attack on a range of IPs, find more informations at :

dns-analysiseducationexploitation
7412 years ago
raw-packet preview

raw-packet

GitHubraw-packet/raw-packet

Raw-packet Project

dns-analysiseducationnetwork-security+4
2366 years ago
DNS-Poisoning-Triage-Lab preview

DNS-Poisoning-Triage-Lab

GitHubnicholasc03/dns-poisoning-triage-lab

Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping,…

dns-analysiseducationforensics+6
13 months ago
DNS-Mayhem-CVE-2026-41096-Deep-Dive preview

DNS-Mayhem-CVE-2026-41096-Deep-Dive

GitHubmrk336/dns-mayhem-cve-2026-41096-deep-dive

In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS…

dns-analysiseducationexploitation+4
45 months ago
CVE-2026-51385 preview

CVE-2026-51385

GitHubarturo0x90/cve-2026-51385

Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385,…

dns-analysiseducationexploitation+2
3 months ago
ipeeyoupeewepee preview

ipeeyoupeewepee

GitHubpapayajackal/ipeeyoupeewepee

Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)

dns-analysiseducationexploitation+4
121 year ago
CVE-2026-34835-Black-box-Analysis preview

CVE-2026-34835-Black-box-Analysis

GitHubcyber-note/cve-2026-34835-black-box-analysis

A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…

dns-analysiseducationpenetration-testing+3
63 months ago
cve-2018-5740 preview

cve-2018-5740

GitHubsischkg/cve-2018-5740

Proof-of-concept exploit for CVE-2018-5740, a denial-of-service vulnerability in BIND DNS server triggered by a crafted DNAME query, with…

dns-analysiseducationexploitation+2
38 years ago
CVE-2017-15120_PoC preview

CVE-2017-15120_PoC

GitHubshutingrz/cve-2017-15120_poc

PowerDNS CVE-2017-15120 / DO NOT ABUSE

dns-analysiseducationexploitation+2
8 years ago
dns-rebind-toolkit preview

dns-rebind-toolkit

GitHubbrannondorsey/dns-rebind-toolkit

A front-end JavaScript toolkit for creating DNS rebinding attacks.

dns-analysiseducationexploitation+6
5045 years ago
arp-dns-attacks preview

arp-dns-attacks

GitHubashishraste/arp-dns-attacks

ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library

dns-analysiseducationexploitation+3
3113 years ago
BIND-9-Cache-Poisoning-PoC---CVE-2025-40778 preview

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

GitHubsirbuvladste/bind-9-cache-poisoning-poc---cve-2025-40778

Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records.

dns-analysiseducationexploitation+3
9 months ago
Previous123Next