Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
186 results
Invoke-ATTACKAPI preview
Archived

Invoke-ATTACKAPI

GitHubcyb3rward0g/invoke-attackapi

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API

curated-resourceseducationinformation-gathering+3
368
7 years ago
Mr.Holmes preview

Mr.Holmes

GitHublucksi/mr.holmes

Modular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…

dns-subdomain-enumerationeducationemail-harvesting+3
4.1k6 months ago
Vulnerable-Web-Application preview

Vulnerable-Web-Application

GitHubowasp/vulnerable-web-application

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

educationpenetration-testingweb-application-exploitation
4227 years ago
CVE-2017-5123 preview

CVE-2017-5123

GitHubc3r34lk1ll3r/cve-2017-5123

PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR

binary-exploitationeducationexploitation+2
336 years ago
Neton preview

Neton

GitHubaetsu/neton

Agent-based tool that collects OS, hardware, file, and hook data from internet-connected sandboxes via HTTPS exfiltration, aiding Red Team artifact…

educationinformation-gatheringmalware-analysis+1
1003 years ago
browser-pwn preview

browser-pwn

GitHubm1ghtym0/browser-pwn

An updated collection of resources targeting browser-exploitation.

binary-exploitationctfcurated-resources+4
8315 years ago
persistence-info.github.io preview

persistence-info.github.io

GitHubpersistence-info/persistence-info.github.io
curated-resourceseducationpersistence-mechanisms+1
5322 years ago
CVE-2023-22894 preview

CVE-2023-22894

GitHubsaboor-hakimi/cve-2023-22894

CVE-2023-22894

educationexploitationinformation-gathering+3
133 years ago
CVE-2024-24919 preview

CVE-2024-24919

GitHubverylazytech/cve-2024-24919

POC - CVE-2024–24919 - Check Point Security Gateways

educationexploitationinformation-gathering+3
91 year ago
CVE-2026-54337-PoC preview

CVE-2026-54337-PoC

GitHub4qu4r1um/cve-2026-54337-poc

CVE-2026-54337 - Unauthenticated File Write/Overwrite PoC for fireshare <= 1.16.3

ctfeducationexploitation+3
2 months ago
Telstra-Cybersecurity-Virtual-Experience- preview

Telstra-Cybersecurity-Virtual-Experience-

GitHubbl34chig0/telstra-cybersecurity-virtual-experience-

A simple python script for a firewall rule that blocks incoming requests based on the Spring4Shell (CVE-2022-22965) vulnerability

educationincident-responselabs-practice+2
22 years ago
CVE-2024-33453 preview

CVE-2024-33453

GitHubant1sec-ops/cve-2024-33453

Sensitive Data exposure

educationinformation-gatheringmisconfiguration+3
11 year ago
browser-xpi-malware-scanner preview

browser-xpi-malware-scanner

GitHubernos/browser-xpi-malware-scanner

A comprehensive browser extension (.xpi) malware scanner which checks for many common malware tricks like:, credential-stealers obfuscation tactics,…

code-analysiseducationforensics+5
84 months ago
Project-Field-Analysis-and-Memory-Leak-Demonstration preview

Project-Field-Analysis-and-Memory-Leak-Demonstration

GitHubartemcyberlab/project-field-analysis-and-memory-leak-demonstration

The objective of this project was to assess a remote host for the Heartbleed vulnerability (CVE-2014-0160), verify its presence, and exploit it to…

educationexploitationinformation-gathering+3
1 year ago
CVE-2023-23752 preview

CVE-2023-23752

GitHubrival420/cve-2023-23752

Joomla! < 4.2.8 - Unauthenticated information disclosure exploit

educationexploitationinformation-gathering+3
2 years ago
insightsnexus preview

insightsnexus

GitHubcyberintel-labs/insightsnexus

OSINT Graph Investigation Application

curated-resourcesdns-subdomain-enumerationeducation+7
348 months ago
FARO preview

FARO

GitHubgradiant/faro

FARO - Document Sensitivity Detector

configuration-auditingdata-exfiltrationeducation+5
103 years ago
AIL-framework preview

AIL-framework

GitHubcircl/ail-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

crawlerdata-exfiltrationdigital-forensics+6
1.4k3 days ago
Previous123…11Next