Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
77 results
bug-bounty-reports-desai-vinayak preview

bug-bounty-reports-desai-vinayak

GitHubdesaivinayak449/bug-bounty-reports-desai-vinayak

Bug bounty and vulnerability research reports by Desai Vinayak — includes CVE-2023-50290 (Apache Solr) and Zscaler subdomain takeover findings.

cloud-securitycurated-resourcesdns-analysis+6
9 months ago
CVE-2020-1350 preview

CVE-2020-1350

GitHubcvemaster/cve-2020-1350

DNS Vulnerability - CVE-2020-1350

dns-analysiseducationexploitation+1
6 years ago
ShareDoc_cve-2015-5477 preview

ShareDoc_cve-2015-5477

GitHublikekabin/sharedoc_cve-2015-5477

Shared technical notes and debugging documentation for CVE-2015-5477, a BIND DNS denial-of-service vulnerability. Focuses on reproduction, analysis,…

curated-resourcesdns-analysiseducation+1
10 years ago
cve-2015-7547-public preview
Archived

cve-2015-7547-public

GitHubesentire/cve-2015-7547-public

PoC attack server for CVE-2015-7547 buffer overflow vulnerability in glibc DNS stub resolver (public version)

binary-exploitationdns-analysisexploitation+3
1010 years ago
sub404 preview
Archived

sub404

GitHubr3curs1v3-pr0xy/sub404

A python tool to check subdomain takeover vulnerability

dns-analysispenetration-testingreconnaissance+3
3533 years ago
fast-security-scanners preview

fast-security-scanners

GitHubwhitespots/fast-security-scanners

Security checks for your researches

dns-analysismisconfigurationvulnerability-scanners+2
355 years ago
CVE-2026-50980 preview

CVE-2026-50980

GitHubbugresearch/cve-2026-50980

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

dns-analysisexploitationvulnerability-analysis+2
1 month ago
dns_client_fuzzing preview

dns_client_fuzzing

GitHubpersonnumber3377/dns_client_fuzzing

Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.

binary-analysisdns-analysisexploitation+2
1 month ago
CVE-2023-29929 preview

CVE-2023-29929

GitHubysaxon/cve-2023-29929
dns-analysisexploitationfuzzing+1
11 year ago
dnsbin preview

dnsbin

GitHubettic-team/dnsbin

DNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…

data-exfiltrationdns-analysispenetration-testing+1
2428 years ago
log4jcheck preview

log4jcheck

GitHubnorthwavesecurity/log4jcheck

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

dns-analysisexploitationinformation-gathering+3
1274 years ago
Email-Vulnerability-Checker preview

Email-Vulnerability-Checker

GitHubblack-scorp10/email-vulnerability-checker

Automated SPF and DMARC configuration checker that identifies email spoofing vulnerabilities across single or bulk domains using DNS lookups.

dns-analysisemail-securityinformation-gathering+1
972 years ago
policymaker preview

policymaker

GitHubdisclose/policymaker

A free, open-source, multi-lingual, template-based VDP policy, safe harbor clause, securitytxt, and DNS Security TXT generator.

curated-resourcesdns-analysiseducation+2
169 days ago
CVE-2025-50505 preview

CVE-2025-50505

GitHuba0yami/cve-2025-50505
command-and-controldns-analysisexploitation+8
2010 months ago
CVE-2020-1350 preview

CVE-2020-1350

GitHubcaptaingeech42/cve-2020-1350

Denial of Service PoC for CVE-2020-1350 (SIGRed)

dns-analysisexploitationpenetration-testing+2
186 years ago
CVE-2021-1675 preview

CVE-2021-1675

GitHubcorelight/cve-2021-1675
dns-analysisexploitationids-ips-evasion+3
91 year ago
CVE-2020-1350 preview

CVE-2020-1350

GitHubmr-r3b00t/cve-2020-1350
dns-analysisexploitationnetwork-security+3
46 years ago
ams-failopen preview

ams-failopen

GitHubjgoyd/ams-failopen

Zero-day in AppleMediaServices: Bag fetch failure disables Mescal/Absinthe signing. Requests to Apple services proceed unsigned, exposing downgrade,…

dns-analysisexploitationpenetration-testing+3
311 months ago
Previous12345Next