Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

98 results

CVE-2024-40725

soltanali0/cve-2024-40725

exploit CVE-2024-40725 (Apache httpd) with

exploitationfuzzingpenetration-testing+3

1 year ago

cdf

kudelskisecurity/cdf

binary-analysiscryptographyfuzzing+1

1715 years ago

ffufw

puzzlepeaches/ffufw

fuzzinginformation-gatheringpenetration-testing+2

1465 months ago

netgear_r6700v3_circled

cyber-defence-campus/netgear_r6700v3_circled

Demonstrate some functionalities of Morion by generating an exploit for CVE-2022-27646 (stack buffer overflow on Netgear R6700v3 routers).

binary-exploitationeducationembedded-systems-security+4

81 year ago

Forbidden-Buster

sn1r/forbidden-buster

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the…

fuzzingids-ips-evasionpenetration-testing+2

2511 year ago

Pishi

r00tkitsmm/pishi

Pishi is a code coverage tool like kcov for macOS.

binary-analysiscode-analysisdynamic-code-analysis+3

763 days ago

NucleiFuzzer

0xkayala/nucleifuzzer

Automated web vulnerability scanner combining URL discovery tools (ParamSpider, waybackurls, gauplus, hakrawler, katana) with Nuclei fuzzing…

fuzzinginformation-gatheringpenetration-testing+3

1.9k4 months ago

Archived

path-auditor

google/path-auditor

binary-analysisdynamic-code-analysisexploitation+3

2505 years ago

SqliSniper

danialhalo/sqlisniper

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

fuzzingvulnerability-scannersweb-security

3122 years ago

peach

calebstewart/peach

Simple vulnerability scanning framework

code-analysisfuzzingstatic-analysis+1

519 years ago

CVE-2025-14847-MongoDB

infosecantara/cve-2025-14847-mongodb

database-securityeducationexploitation+3

16 months ago

insect

nu11secur1ty/insect

fuzzinginformation-gatheringpenetration-testing+3

3 years ago

endsfuzzer

ameenalkerdy/endsfuzzer

Fuzz a list of domains for specific endpoints

fuzzinginformation-gatheringweb-security

3 years ago

fuzzuli

musana/fuzzuli

Domain-aware URL fuzzer that dynamically generates wordlists to discover exposed backup and sensitive files on web servers.

fuzzinginformation-gatheringvulnerability-scanners+1

9432 years ago

DarunGrim

ohjeongwook/darungrim

A patch analysis tool

binary-analysisfuzzingreverse-engineering+2

3655 years ago

ioctlance

zeze-zeze/ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers

binary-analysisdynamic-analysis-sandboxingexploit-frameworks+4

4722 months ago

recollapse

0xacb/recollapse

Black-box regex fuzzing tool that generates payloads to bypass input validations, discover normalizations, and evade WAFs in web applications.

fuzzingpayload-generationwaf-bypass+1

1.4k1 year ago

RFCrack

cclabsinc/rfcrack

A Software Defined Radio Attack Tool

fuzzinghardware-iot-securityrfid-nfc-tools+1

5501 year ago

Previous 123 4 5 6 Next