Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
48 results
big-list-of-naughty-strings preview

big-list-of-naughty-strings

GitHubminimaxir/big-list-of-naughty-strings

Curated list of malicious and edge-case input strings (blns.txt/blns.json) for QA and security testing of user-input validation, injection, and…

curated-resourceseducationfuzzing+4
47.7k
2 years ago
SafeGuard preview

SafeGuard

GitHubpingpongplus/safeguard

CLI Encryption tool written in Go only for learning purposes and demonstration of encryption (not secure)

cryptographyeducationencryption-decryption-tools+1
81 month ago
ZX-DDoS preview

ZX-DDoS

GitHubmrgoofydev/zx-ddos

Python-based DDoS stress testing tool for educational and authorized network security evaluation, supporting configurable workers and request counts.

educationgeneral-purpose-utilitiesnetwork-security+3
591 month ago
CVE-2026-4861 preview

CVE-2026-4861

GitHubhorkimhab/cve-2026-4861

CVE-2026-4861 - Draft or Todo

educationgeneral-purpose-utilitiesvulnerability-analysis
3 months ago
web-traffic-generator preview

web-traffic-generator

GitHubreconinfosec/web-traffic-generator

A quick and dirty HTTP/S "organic" traffic generator.

defensive-toolseducationgeneral-purpose-utilities+2
5126 years ago
PoshSecFramework preview

PoshSecFramework

GitHubposhsec/poshsecframework

A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.

curated-resourcesdefensive-toolseducation+3
1443 years ago
PwnBox-Kali preview

PwnBox-Kali

GitHubblacksnufkin/pwnbox-kali

Bash Script to automate the process of setting up a new Kali Linux virtual machine to look a like HTB PwnBox

educationgeneral-purpose-utilitiespenetration-testing+3
214 years ago
Honeyd preview

Honeyd

GitHubdatasoft/honeyd

virtual honeypots

defensive-toolseducationgeneral-purpose-utilities+2
39412 years ago
DSpace__DSpace_CVE-2022-31192_5-100 preview

DSpace__DSpace_CVE-2022-31192_5-100

GitHubshoucheng3/dspace__dspace_cve-2022-31192_5-100

Open-source digital repository platform for managing, preserving, and providing durable access to digital resources via a REST API and Angular-based…

curated-resourceseducationgeneral-purpose-utilities
9 months ago
jmrozanec__cron-utils_CVE-2021-41269_9-1-5 preview

jmrozanec__cron-utils_CVE-2021-41269_9-1-5

GitHubshoucheng3/jmrozanec__cron-utils_cve-2021-41269_9-1-5

Java library for parsing, validating, migrating, and describing cron expressions with support for multiple formats (Unix, Quartz, Spring) and…

educationgeneral-purpose-utilitiesscripting-automation+1
1 year ago
jlangch__venice_CVE-2022-36007_1-10-16 preview

jlangch__venice_CVE-2022-36007_1-10-16

GitHubshoucheng3/jlangch__venice_cve-2022-36007_1-10-16

Sandboxed Lisp dialect for the JVM with immutable data structures, macros, and over 900 core functions. Ideal for safe scripting, automation, and…

code-analysiscryptographyeducation+2
1 year ago
kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed preview

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

GitHubshoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

Java client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…

api-securityauthentication-authorizationcloud-infrastructure-security+3
11 months ago
jstachio__jstachio_CVE-2023-33962_1-0-0 preview

jstachio__jstachio_CVE-2023-33962_1-0-0

GitHubshoucheng3/jstachio__jstachio_cve-2023-33962_1-0-0

Type-safe Java Mustache templating engine with compile-time template validation, static value binding, and extensible escaping for HTML and other…

code-analysiseducationgeneral-purpose-utilities+2
1 year ago
xwiki__xwiki-rendering_CVE-2023-32070_14-5 preview

xwiki__xwiki-rendering_CVE-2023-32070_14-5

GitHubshoucheng3/xwiki__xwiki-rendering_cve-2023-32070_14-5

Generic rendering system converting wiki syntax, HTML, and other formats into XHTML. Part of the XWiki platform, providing a flexible and extensible…

code-analysiseducationgeneral-purpose-utilities+2
11 months ago
mkdocs preview

mkdocs

GitHubmkdocs/mkdocs

Project documentation with Markdown.

curated-resourceseducationgeneral-purpose-utilities+2
22.3k1 year ago
MC-Log4j-Patcher preview

MC-Log4j-Patcher

GitHubkoupah/mc-log4j-patcher

A singular file to protect as many Minecraft servers and clients as possible from the Log4j exploit (CVE-2021-44228).

educationexploitationgeneral-purpose-utilities+2
44 years ago
jackson preview

jackson

GitHubsassoftware/jackson

This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…

code-analysisgeneral-purpose-utilitiesstatic-analysis+2
16 months ago
Fix-CVE-2017-1000117 preview

Fix-CVE-2017-1000117

GitHubshogo82148/fix-cve-2017-1000117

Test repository for verifying Git's CVE-2017-1000117 vulnerability and upgrading Git versions. Clone with --recursive to check safety.

educationexploitationgeneral-purpose-utilities+1
9 years ago
Previous123Next