Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

43 results

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

30.4k

8h 39m ago

httpx

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18

10.3k1 day ago

fake-sms

narasimha1997/fake-sms

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

general-purpose-utilitiesinformation-gatheringosint+1

2.8k4 years ago

mcpsnoop

kerlenton/mcpsnoop

Wireshark for MCP. A transparent proxy between your AI client and MCP server. Watch every call live in your terminal, fail CI on what it finds,…

api-security-testingdebuggersdynamic-analysis-sandboxing+5

33417 days ago

geolocation-tool

jimaek/geolocation-tool

Geo locate any IP to a physical location using latency

general-purpose-utilitiesinformation-gatheringnetwork-mapping+2

1322 months ago

raspberrypi-setup

atao/raspberrypi-setup

Ansible playbook for rapid Raspberry Pi setup with modular roles for wireless security testing, RFID/NFC tools, SDR, Docker, Tor proxy, and standard…

general-purpose-utilitieshardware-iot-securityrfid-nfc-tools+2

536 days ago

CVE-2024-3094

gustavorobertux/cve-2024-3094

Lightweight Go-based checker that scans system package managers (dpkg, rpm, pacman, MacOS) for CVE-2024-3094 vulnerability, verifying xz version and…

general-purpose-utilitiesinformation-gatheringvulnerability-analysis+1

32 years ago

Chrome-and-Edge-Version-Dumper

mav3r1ck0x1/chrome-and-edge-version-dumper

Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096

general-purpose-utilitiesinformation-gatheringscripting-automation+1

24 years ago

wifi-password

sdushantha/wifi-password

Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect

general-purpose-utilitieswireless-security

3.1k3 years ago

SecLists

danielmiessler/seclists

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

ctfcurated-resourcesdns-fuzzing+11

72.8k10h 8m ago

proxychains-ng

rofl0r/proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…

command-and-controldata-exfiltrationgeneral-purpose-utilities+6

10.7k28 days ago

httprobe

tomnomnom/httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

dns-subdomain-enumerationgeneral-purpose-utilitiesinformation-gathering+7

3.1k4 years ago

bashacks

merces/bashacks

A set of functions to increase productivity while hacking with Bash

encryption-decryption-toolsgeneral-purpose-utilitieshash-analysis+3

21127 days ago

samplicator

sleinen/samplicator

Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing

general-purpose-utilitiesnetwork-mappingpacket-sniffing-analysis

4185 years ago

CVE-2024-38063

diegoalbuquerque/cve-2024-38063

mitigation script by disabling ipv6 of all interfaces

general-purpose-utilitiesmisconfigurationnetwork-security+2

132 years ago

CVE-2023-38545

bcdannyboy/cve-2023-38545

A proof of concept for testing CVE-2023-38545 against local curl

exploitationgeneral-purpose-utilitiesnetwork-security+3

43 years ago

CVE-2024-3094-XZ-Utils-Check

jbnetwork-git/cve-2024-3094-xz-utils-check

Shell script to check if your system has a vulnerable version of XZ Utils affected by CVE-2024-3094, enabling quick detection of the supply-chain…

general-purpose-utilitiesscripting-automationsupply-chain-security+2

32 years ago

ip2

bybravehq/ip2

Maintained fork of node-ip with the unpatched SSRF advisory (CVE-2024-29415) fixed

configuration-auditinggeneral-purpose-utilitiesnetwork-security+3

20 days ago

Previous 123 Next