Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
346 results
CVE-2024-4577 preview

CVE-2024-4577

GitHubahmetramazank/cve-2024-4577
educationexploitationforensics+5
1 year ago
Belsen_Group-et-exploitation-de-la-CVE-2022-40684 preview

Belsen_Group-et-exploitation-de-la-CVE-2022-40684

GitHubyami0x777/belsen_group-et-exploitation-de-la-cve-2022-40684
forensicsincident-responseioc-management+3
1 year ago
CVE-2023-21716_YARA_Results preview

CVE-2023-21716_YARA_Results

GitHubmikesxrs/cve-2023-21716_yara_results

Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar

forensicsioc-managementmalware-analysis+2
3 years ago
tracehound preview
Archived

tracehound

GitHubtracehound/tracehound

Operational security controls with forensic guarantees

api-securitydefensive-toolsforensics+5
18 days ago
linux-explorer preview
Archived

linux-explorer

GitHubintezer/linux-explorer

Easy-to-use live forensics toolbox for Linux endpoints

digital-forensicsforensicsincident-response+7
4052 years ago
linux preview

linux

GitHubtorvalds/linux

Linux kernel source tree

cloud-securitycryptographyeducation+9
243.3k2 days ago
volatility preview
Archived

volatility

GitHubvolatilityfoundation/volatility

An advanced memory forensics framework

digital-forensicsforensicsincident-response+4
8.1k1 year ago
cuckoo preview
Archived

cuckoo

GitHubcuckoosandbox/cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

dynamic-analysis-sandboxingforensicsmalware-analysis+2
6.0k4 years ago
malice preview
Archived

malice

GitHubmaliceio/malice

VirusTotal Wanna Be - Now with 100% more Hipster

cloud-securitycontainer-securitydynamic-analysis-sandboxing+6
1.9k3 years ago
rekall preview
Archived

rekall

GitHubgoogle/rekall

Rekall Memory Forensic Framework

digital-forensicsforensicsincident-response+3
2.0k5 years ago
android-forensics preview
Archived

android-forensics

GitHubnowsecure/android-forensics

Open source Android Forensics app and framework

android-securitydata-recoverydigital-forensics+2
39711 years ago
MIDAS preview
Archived

MIDAS

GitHubetsy/midas

Mac Intrusion Detection Analysis System

defensive-toolsforensicsincident-response+2
82610 years ago
HAFNIUM-IOC preview
Archived

HAFNIUM-IOC

GitHubsoteria-security/hafnium-ioc

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

digital-forensicsforensicsincident-response+3
225 years ago
Detect-CVE-2017-15361-TPM preview
Archived

Detect-CVE-2017-15361-TPM

GitHubnsacyber/detect-cve-2017-15361-tpm

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

configuration-auditingcryptographyforensics+3
637 years ago
check-your-pulse preview
Archived

check-your-pulse

GitHubcisagov/check-your-pulse

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

forensicsincident-responseioc-management+3
286 years ago
exchange_webshell_detection preview
Archived

exchange_webshell_detection

GitHubcert-lv/exchange_webshell_detection

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857,…

forensicsincident-responseioc-management+3
995 years ago
cve-2021-27065 preview
Archived

cve-2021-27065

GitHubadamrpostjr/cve-2021-27065

Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.

digital-forensicsforensicsincident-response+3
115 years ago
DumpChromeSecrets preview
Archived

DumpChromeSecrets

GitHubmaldev-academy/dumpchromesecrets

Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

data-exfiltrationdigital-forensicseducation+8
5607 months ago
Previous1…181920Next