Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
291 results
secator preview

secator

GitHubfreelabz/secator

secator - the pentester's swiss knife

dns-analysisexploit-frameworksfuzzing+8
1.3k2 days ago
Awesome-Hacking preview

Awesome-Hacking

GitHubhack-with-github/awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

ctfcurated-resourceseducation+6
118.7k25 days ago
WireBug preview

WireBug

GitHubsyss-research/wirebug

WireBug is a toolset for Voice-over-IP penetration testing

authenticationencryption-decryption-toolsfuzzing+3
1774 years ago
firmware preview

firmware

GitHubbrucedevices/firmware

Predatory ESP32 Firmware

bluetooth-securityembedded-systems-securityexploitation+9
6.5k9 days ago
SecLists preview

SecLists

GitHubdanielmiessler/seclists

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

curated-resourcesfuzzingpassword-cracking+3
73.0k12h 53m ago
bettercap preview

bettercap

GitHubbettercap/bettercap

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bluetooth-securityfuzzinghardware-hacking+6
19.8k7 days ago
XSStrike preview

XSStrike

GitHubs0md3v/xsstrike

Most advanced XSS scanner.

crawlerfuzzinginformation-gathering+6
15.1k1 year ago
lamda preview

lamda

GitHubfirerpa/lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…

android-securitydynamic-analysis-sandboxingeducation+8
8.2k4 days ago
TLS-Attacker preview

TLS-Attacker

GitHubtls-attacker/tls-attacker

Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

cryptographyfuzzingnetwork-security+2
87927 days ago
BypassFuzzer preview
Archived

BypassFuzzer

GitHubintrudir/bypassfuzzer

Fuzz 401/403/404 pages for bypasses

fuzzingids-ips-evasionpenetration-testing+3
4317 months ago
forbidden preview

forbidden

GitHubivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

fuzzingids-ips-evasioninformation-gathering+5
25711 months ago
CVE-2025-30208-EXP preview

CVE-2025-30208-EXP

GitHubthumpbo/cve-2025-30208-exp

CVE-2025-30208-EXP

exploitationfuzzinginformation-gathering+3
1961 year ago
Politician preview

Politician

GitHub0ldev/politician

Modern WiFi auditing library for ESP32 using advanced 802.11 techniques. Captures WPA/WPA2/WPA3 handshakes via PMKID extraction and CSA injection…

embedded-systems-securityfuzzinghardware-security+6
949 days ago
ffuf preview

ffuf

GitHubffuf/ffuf

Fast web fuzzer written in Go

fuzzinginformation-gatheringpenetration-testing+2
16.5k1 month ago
dirsearch preview

dirsearch

GitHubmaurosoria/dirsearch

Web path scanner

fuzzinginformation-gatheringpenetration-testing+3
14.6k4 days ago
gobuster preview

gobuster

GitHuboj/gobuster

Directory/File, DNS and VHost busting tool written in Go

cloud-securitydns-subdomain-enumerationfuzzing+3
14.0k7 months ago
scapy preview

scapy

GitHubsecdev/scapy

Scapy: the Python-based interactive packet manipulation program & library.

cryptographyeducationforensics+7
12.5k2 days ago
fuzzdb preview

fuzzdb

GitHubfuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

curated-resourcesfuzzinginformation-gathering+3
9.0k6 years ago
Previous12…17Next