Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

60 results

PolarDNS

oryxlabs/polardns

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

dns-analysisfuzzingnetwork-security+3

2491 year ago

CVE-2020-1350

captaingeech42/cve-2020-1350

Proof-of-concept Denial of Service exploit for CVE-2020-1350 (SIGRed) targeting Windows DNS servers via crafted DNS SIG records. Includes PCAP for…

dns-analysisexploitationpenetration-testing+2

186 years ago

CVE-2021-23017-PoC

lakshit1212/cve-2021-23017-poc

Proof-of-concept exploit for CVE-2021-23017 targeting a remote host with a custom DNS server. Designed for security testing and vulnerability…

dns-analysisexploitationpenetration-testing+2

13 years ago

CVE-2004-0789-DDOS

himmel-byte/cve-2004-0789-ddos

Python-based exploit for CVE-2004-0789 targeting DNS servers with configurable request flooding for denial-of-service testing.

dns-analysisexploitationnetwork-security+2

11 year ago

log4j2burpscanner

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2

8403 years ago

proxychains

haad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1

7.9k2 years ago

subjack

haccer/subjack

Concurrent DNS takeover scanner detecting CNAME, NS, AXFR, SPF, MX, SRV, and stale A record vulnerabilities across cloud providers, with multi-level…

dns-analysispenetration-testingsubdomain-enumeration+2

2.1k13 days ago

bypass-firewalls-by-DNS-history

vincentcox/bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that…

dns-analysispenetration-testingreconnaissance+2

1.3k6 years ago

tko-subs

anshumanbh/tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

cloud-securitydns-analysispenetration-testing+2

7765 years ago

CVE-2015-7547

fjserna/cve-2015-7547

Proof of concept for CVE-2015-7547

binary-exploitationdns-analysisexploitation+2

54310 years ago

FakeDns

crypt0s/fakedns

A regular-expression based python MITM DNS server with support for DNS Rebinding attacks

dns-analysisdns-fuzzingnetwork-security+3

5815 years ago

rbndr

taviso/rbndr

Simple DNS Rebinding Service

dns-analysispenetration-testingvulnerability-analysis+1

7558 years ago

Spoofy

mattkeeley/spoofy

Bulk domain spoofability checker using authoritative SPF and DMARC record analysis with custom, real-world tested spoof logic and optional DKIM…

dns-analysisemail-securitypenetration-testing+1

7691 month ago

JudasDNS

mandatoryprogrammer/judasdns

Nameserver DNS poisoning attacks made easy

dns-analysisdns-fuzzingexploitation+2

5269 years ago

dnsFookup

makuga01/dnsfookup

DNS rebinding toolkit

dns-analysisexploitationpenetration-testing+1

2553 years ago

CVE-2020-1350-DoS

maxpl0it/cve-2020-1350-dos

A denial-of-service proof-of-concept for CVE-2020-1350

dns-analysisexploitationpenetration-testing+2

2386 years ago

log4shell-tools

alexbakker/log4shell-tools

Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046

dns-analysisexploitationpenetration-testing+3

862 years ago

cve-2015-5477

robertdavidgraham/cve-2015-5477

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

dns-analysisexploitationpenetration-testing+1

6411 years ago

Previous12 3 4 Next