Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
379 results
PETriage preview

PETriage

GitHubuky007/petriage

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

anomaly-detectionbinary-analysisdigital-forensics+5
13
25 days ago
vuke preview

vuke

GitHuboritwoen/vuke

Research tool for studying vulnerable cryptographic key generation (brainwallet, PRNG, milksad, LCG, xorshift)

cryptographyeducationexploitation+4
194 months ago
jsp-webshell-scanner preview

jsp-webshell-scanner

GitHubrespondiq/jsp-webshell-scanner

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.

code-analysisdigital-forensicsforensics+6
12 months ago
drupal-check preview

drupal-check

GitHubhestat/drupal-check

Tool to dive Apache logs for evidence of exploitation of CVE-2018-7600

forensicsincident-responselog-analysis+2
28 years ago
CVE-2019-19871-AuditGuide preview

CVE-2019-19871-AuditGuide

GitHubvdisec/cve-2019-19871-auditguide

Audit Guide for the Citrix ADC Vulnerability CVE-2019-19871. Collected from multiple sources and threat assessments. Will be updated as new methods…

curated-resourceseducationforensics+3
26 years ago
exchange_webshell_detection preview
Archived

exchange_webshell_detection

GitHubcert-lv/exchange_webshell_detection

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857,…

forensicsincident-responseioc-management+3
995 years ago
ToolShellFinder preview

ToolShellFinder

GitHubzach115th/toolshellfinder

Scans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771

digital-forensicsforensicsincident-response+5
8 months ago
pe-bear preview

pe-bear

GitHubhasherezade/pe-bear

Portable Executable reversing tool with a friendly GUI

binary-analysisforensicsmalware-analysis+3
3.8k2 months ago
apkinspector preview

apkinspector

GitHubhoneynet/apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

android-securitybinary-analysiscode-analysis+7
85213 years ago
Forensia preview

Forensia

GitHubpaulnorman01/forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

defensive-toolsforensicspost-exploitation+1
7863 years ago
powerglot preview

powerglot

GitHubmindcrypt/powerglot

Powerglot encodes offensive powershell scripts using polyglots . Offensive security tool useful for stego-malware, privilege escalation, lateral…

defensive-toolsforensicslateral-movement+4
1846 years ago
NoMoreXOR preview

NoMoreXOR

GitHubhiddenillusion/nomorexor

Tool to help guess a files 256 byte XOR key by using frequency analysis

binary-analysiscryptographyforensics+3
918 years ago
qs_old preview

qs_old

GitHubtylabs/qs_old

Command line tool for scanning streams within office documents plus xor db attack

forensicsmalware-analysisstatic-analysis+1
1272 years ago
OneNoteAnalyzer preview

OneNoteAnalyzer

GitHubknight0x07/onenoteanalyzer

A C# based tool for analysing malicious OneNote documents

forensicsmalware-analysisreverse-engineering+1
1183 years ago
plugxdecoder preview

plugxdecoder

GitHubkcreyts/plugxdecoder

Decodes PlugX traffic and encrypted/compressed artifacts

digital-forensicsencryption-decryption-toolsforensics+3
3813 years ago
PhaseDump preview

PhaseDump

GitHubmalwaretech/phasedump

Python tool for decrypting W32/Phase modules

binary-analysisencryption-decryption-toolsforensics+2
711 years ago
lure preview

lure

GitHub0xusmanismail/lure

Local Linux binary analysis tool. Zero cloud. Zero root. See exactly what a binary does before you run it.

binary-analysisctfdynamic-analysis-sandboxing+4
39 days ago
YellowKey-Bitlocker-CVE-2026-45585 preview

YellowKey-Bitlocker-CVE-2026-45585

GitHubboobalover7/yellowkey-bitlocker-cve-2026-45585

Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.

data-recoveryencryption-decryption-toolsexploitation+3
6 days ago
Previous1…456…22Next