Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
68 results
phantom-grid preview

phantom-grid

GitHubevkir/phantom-grid

Free Burp Collaborator alternative- OOB interaction capture (HTTP/HTTPS/DNS) with SQLite & exfil reassembly

data-exfiltrationdns-analysisinformation-gathering+7
1
2 months ago
bromite preview

bromite

GitHubbromite/bromite

Android Chromium fork with built-in ad blocking, anti-fingerprinting mitigations, DNS-over-HTTPS, and hardened privacy and security defaults.

android-securityanti-botdefensive-tools+7
6.3k2 years ago
dig preview

dig

GitHubxsser/dig

macOS dig wrapper that appends spoofed local TXT records to DNS query output, designed to deceive LLM agents into performing automated penetration…

command-and-controldns-analysisinformation-gathering+3
1121 month ago
dnsgen preview

dnsgen

GitHubalephnullsk/dnsgen

Generates domain name permutations for subdomain enumeration and recon, supporting custom wordlists, cloud patterns, and fast mode for security…

dns-analysisdns-fuzzingdns-subdomain-enumeration+5
1.1k1 year ago
vegadns preview

vegadns

GitLabwattocyber/vegadns

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

dns-analysisdns-subdomain-enumerationinformation-gathering+3
2 months ago
dnschef-ng preview
Archived

dnschef-ng

GitHubbyt3bl33d3r/dnschef-ng

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

data-exfiltrationdns-analysisinformation-gathering+4
1742 years ago
ams-failopen preview

ams-failopen

GitHubjgoyd/ams-failopen

Zero-day in AppleMediaServices: Bag fetch failure disables Mescal/Absinthe signing. Requests to Apple services proceed unsigned, exposing downgrade,…

dns-analysisexploitationpenetration-testing+3
31 year ago
proxychains preview

proxychains

GitHubhaad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1
8.0k2 years ago
CVE-2021-23017 preview

CVE-2021-23017

GitHubmoften/cve-2021-23017

NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC

dns-analysisexploitationpenetration-testing+2
1 year ago
CVE-2015-7547 preview

CVE-2015-7547

GitHubt0r0t0r0/cve-2015-7547

Proof-of-concept exploit for CVE-2015-7547 glibc DNS resolver vulnerability. Includes Python and PHP scripts to trigger buffer overflow via crafted…

dns-analysisexploitationnetwork-security+2
110 years ago
vuln-scanner preview

vuln-scanner

GitHubzappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

api-security-testingcloud-securityconfiguration-auditing+9
131 month ago
FakeDns preview

FakeDns

GitHubcrypt0s/fakedns

A regular-expression based python MITM DNS server with support for DNS Rebinding attacks

dns-analysisdns-fuzzingnetwork-security+3
5865 years ago
firepwner preview

firepwner

GitHubmattimustang/firepwner

Exploit for CVE-2015-6357 Cisco FireSIGHT Management Center Certificate Validation Vulnerability

command-and-controldns-analysisexploitation+4
610 years ago
TKEY-remote-DoS-vulnerability-exploit preview

TKEY-remote-DoS-vulnerability-exploit

GitHubxycloops123/tkey-remote-dos-vulnerability-exploit

Exploit code for CVE-2015-5477 POC

dns-analysisexploitationpenetration-testing+2
6 years ago
PHP-CGI-INTERNAL-RCE preview

PHP-CGI-INTERNAL-RCE

GitHubmananjain61/php-cgi-internal-rce

Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers

dns-analysisexploitationpayload-development+3
1 year ago
log4j2burpscanner preview

log4j2burpscanner

GitHubjeromeyoung/log4j2burpscanner

CVE-2021-44228,log4j2 burp插件 Java版本,dnslog选取了非dnslog.cn域名

dns-analysisexploitationpenetration-testing+3
324 years ago
dnsmasq-2.4.1-fix-CVE-2017-14491 preview

dnsmasq-2.4.1-fix-CVE-2017-14491

GitHubskyformat99/dnsmasq-2.4.1-fix-cve-2017-14491

Patch for CVE-2017-14491 in dnsmasq 2.4.1, fixing a heap-based buffer overflow in DNS response handling to prevent remote code execution.

dns-analysisexploitationnetwork-security+2
9 years ago
CVE20265172poc preview

CVE20265172poc

GitHublottiedeyan/cve20265172poc

CVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC

binary-exploitationdns-analysisexploitation+3
5 months ago
Previous1234Next