Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

146 results

Archived

passera

mwgg/passera

[UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for…

authenticationencryption-decryption-toolsgeneral-purpose-utilities+2

8 years ago

egg-scripts-CVE-2018-3786

erik-krogh/egg-scripts-cve-2018-3786

Deployment tool for Egg.js applications that manages start, stop, and daemonization of Node.js processes with configurable port, workers, and logging.

general-purpose-utilities

6 years ago

Win11Debloat

raphire/win11debloat

A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to…

general-purpose-utilitiesprivacyscripting-automation+1

56.5k6 days ago

TheCl0n3r

an00byss/thecl0n3r

TheCl0n3r will allow you to download and manage your git repositories.

general-purpose-utilitiesscripting-automationutilities-frameworks

515 years ago

orb

zayan-mohamed/orb

Orb is a secure, terminal-first utility that allows you to share a local folder across the internet using end-to-end encryption. No accounts, no…

authenticationencryption-decryption-toolsgeneral-purpose-utilities+3

177 months ago

httrack

xroche/httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

crawlergeneral-purpose-utilitiesinformation-gathering

4.7k2 days ago

Chrome-and-Edge-Version-Dumper

mav3r1ck0x1/chrome-and-edge-version-dumper

Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096

general-purpose-utilitiesinformation-gatheringscripting-automation+1

24 years ago

icu-74-debian

berkley4/icu-74-debian

Debian build files for icu 74.2 with a patch to fix CVE-2025-5222

encryption-decryption-toolsgeneral-purpose-utilitiessupply-chain-security+1

11 year ago

magika

google/magika

Fast and accurate AI powered file content types detection

code-analysisforensicsgeneral-purpose-utilities+3

18k1 month ago

Archived

pwl

wkovacs64/pwl

Password Lense: reveal character types in a password

authenticationgeneral-purpose-utilitiespassword-attacks+3

2310 months ago

sshpass-win32

xhcoding/sshpass-win32

Windows version of http://sourceforge.net/projects/sshpass/

authenticationgeneral-purpose-utilitiespassword-attacks+1

1513 months ago

Archived

rabl-old

cph/rabl-old

Ruby templating system for generating JSON and XML APIs, with a fix for CVE-2014-4671. Supports partials, inheritance, and custom nodes for flexible…

api-securitygeneral-purpose-utilitiesvulnerability-analysis+1

9 years ago

genact

svenstaro/genact

🌀 A nonsense activity generator

general-purpose-utilities

12.2k3 days ago

testng-team__testng_CVE-2022-4065_7-5

shoucheng3/testng-team__testng_cve-2022-4065_7-5

Java testing framework for unit, integration, and end-to-end tests with annotations, data-driven testing, and parallel execution support.

code-analysisdevsecopsgeneral-purpose-utilities

1 year ago

spydir

z3apa3a/spydir

Spydir is a small utility to monitor file changes in Windows directory regardless of subdirectory and files permissions (exploits CVE-2007-0843)

exploitationgeneral-purpose-utilitiesprivilege-escalation+1

99 years ago

Archived

fbconsulting_v0_chat

iamfarzad/fbconsulting_v0_chat

ARCHIVED: FBC v0 chat prototype draft. Deprecated. Vulnerable to CVE-2026-44579 (Next.js Cache DoS).

general-purpose-utilities

1 year ago

Archived

fastjson

alibaba/fastjson

FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.

encryption-decryption-toolsgeneral-purpose-utilities

25.6k1 month ago

unfurl

tomnomnom/unfurl

Pull out bits of URLs provided on stdin

general-purpose-utilitiesinformation-gatheringreconnaissance+1

1.3k3 years ago

Previous12…9 Next