Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
15 results
Nebula preview

Nebula

GitHubgl4ssesbo1/nebula

Modular cloud penetration testing framework with teamserver-client architecture for reconnaissance, enumeration, exploitation, and post-exploitation…

cloud-securitycommand-and-controlexploit-frameworks+3
636
1 year ago
GoEnumerator preview

GoEnumerator

GitLabrek2/goenumerator

A personal tool in GO for my usual first enumeration steps on a target

exploit-frameworksinformation-gatheringpenetration-testing+3
17 years ago
PEASS-ng preview

PEASS-ng

GitHubpeass-ng/peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

educationexploitationexploit-frameworks+7
20.4k1 day ago
metateta preview

metateta

GitHubsafebuffer/metateta

Automated network protocol scanner and exploiter leveraging Metasploit modules for rapid penetration testing across large networks, supporting SMB,…

exploit-frameworksnetwork-securitypenetration-testing-frameworks+1
848 years ago
discover preview

discover

GitHubleebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

api-security-testingcloud-securitycontainer-security+9
3.9k1 day ago
vulnx preview

vulnx

GitHubanouarbensaad/vulnx

Automated CMS vulnerability scanner with intelligent shell injection, subdomain enumeration, port scanning, DNS analysis, and dork-based exploit…

crawlerdns-analysisexploit-frameworks+5
2.1k4 years ago
htbenum preview

htbenum

GitHubsolomonsklash/htbenum

A Linux enumeration script for Hack The Box

exploit-frameworksinformation-gatheringpenetration-testing+2
1926 years ago
webdiscover preview

webdiscover

GitHubv1n1v131r4/webdiscover

The purpose of this script is to automate the web enumeration process and search for exploits

exploit-frameworksreconnaissancevulnerability-scanners+1
1164 years ago
ThunderCloud preview

ThunderCloud

GitHubrnalter/thundercloud

Modular cloud exploitation framework targeting AWS and Azure with modules for privilege escalation, credential harvesting, S3 attacks, and role…

cloud-securityexploitationexploit-frameworks+4
1124 years ago
PAVELOW preview

PAVELOW

GitHuboffxec/pavelow

Bash-based penetration testing toolbox automating reconnaissance, vulnerability scanning, and exploitation workflows on Kali Linux with integrated…

exploit-frameworksinformation-gatheringosint+7
908 years ago
Penetration-Testing-Assessment-23-04-2026 preview

Penetration-Testing-Assessment-23-04-2026

GitHubadmin2099/penetration-testing-assessment-23-04-2026

Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…

educationexploitationexploit-frameworks+9
2 months ago
React2Shell preview

React2Shell

GitHub4nuxd/react2shell

Exploit and post-exploitation framework for Next.js RSC (CVE-2025-55182), with interactive RCE, file transfer, persistence, enumeration, and privesc.

command-and-controlcontainer-escapedata-exfiltration+7
8 months ago
Offensive-lab-2 preview

Offensive-lab-2

GitHubmafiosohack/offensive-lab-2

Penetration test walkthrough on a vulnerable Ubuntu VM. Exploited the ProFTPD 1.3.3c backdoor (CVE-2010-4221) to gain root access and capture the…

ctfeducationexploitation+8
8 months ago
scan4all preview

scan4all

GitHubghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dns-subdomain-enumerationexploit-frameworksfuzzing+9
6.2k2 years ago
V3n0M-Scanner preview

V3n0M-Scanner

GitHubv3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

dns-subdomain-enumerationexploit-frameworksinformation-gathering+3
1.6k3 years ago