Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

680 results

ageverificationbypass

haplessidiot/ageverificationbypass

Bypass age verification service from redhat

defensive-toolseducationids-ips-evasion+3

3 months ago

2024

100daysofyara/2024

Rules shared by the community from 100 Days of YARA 2024

curated-resourceseducationlearning-paths-courses+2

901 year ago

IronPE

iss4cf0ng/ironpe

Rust-based Windows PE manual loader that maps and executes x86/x64 executables from memory, demonstrating internal loader behavior and PE structure…

binary-analysisbinary-exploitationeducation+5

1245 months ago

2023

100daysofyara/2023

Rules Shared by the Community from 100 Days of YARA 2023

curated-resourceseducationmalware-analysis

783 years ago

AbxOverflow

michalbednarski/abxoverflow

Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code…

android-securitybinary-exploitationcode-analysis+5

6810 months ago

CVE-2024-29943

bjrjk/cve-2024-29943

A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE

binary-exploitationeducationexploitation+2

971 year ago

Neton

aetsu/neton

Agent-based tool that collects OS, hardware, file, and hook data from internet-connected sandboxes via HTTPS exfiltration, aiding Red Team artifact…

educationinformation-gatheringmalware-analysis+1

1003 years ago

DracOS

screetsec/dracos

Dracos Linux ( www.dracos-linux.org ) is the Linux operating system from Indonesian

educationexploitationforensics+8

589 years ago

CVE-2024-6769

fortra/cve-2024-6769

Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)

binary-exploitationeducationexploitation+3

791 year ago

congresos-slides

x-c3ll/congresos-slides

Curated collection of conference slide decks covering technical talks and research insights from industry and academic events.

curated-resourceseducationpapers-research

572 months ago

OverRide

anyaschukin/override

Binary Exploitation and Reverse-Engineering (from assembly into C)

binary-exploitationctfeducation+2

725 years ago

meta-ai-support-prompt

michaelcummings12/meta-ai-support-prompt

Extracted system prompt from Meta's AI Support Assistant on June 1, 2026

ai-securitycurated-resourceseducation+1

412 months ago

Cybersecurity-Handbook

priyanshu-rawa/cybersecurity-handbook

A community‑driven cybersecurity knowledge base with 400+ notes, mind‑maps, and cheat‑sheets – built from first principles. Ideal for students, SOC…

cloud-securitycryptographycurated-resources+7

563 days ago

Hx0-HawkEye

asaotomo/hx0-hawkeye

一个轻量级浏览器抓包与安全分析扩展，在浏览器侧边栏中即可完成抓包、拦截、修改、重放、规则检测与AI辅助分析的完整工作流。（A lightweight browser extension for traffic capture and security analysis, enabling…

ai-securityapi-security-testingctf+7

602 months ago

Talks

neo23x0/talks

Curated slide decks from public presentations, providing educational technical material for practitioners and researchers.

curated-resourceseducationpapers-research

656 months ago

react

janhalendk/react

A OSINT project that explores how to dump data from React

educationinformation-gatheringosint+2

8211 months ago

Nac_Bypass_Agent

alperenugurlu/nac_bypass_agent

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

educationids-ips-evasionimpersonation-tools+5

733 years ago

secure-coding-practices-quick-reference-guide

owasp/secure-coding-practices-quick-reference-guide

The Secure Coding Practices Quick-reference Guide from OWASP

code-analysiscurated-resourceseducation+2

495 months ago

Previous 1…456…38 Next