Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
106 results
FakeNetBIOS preview

FakeNetBIOS

GitHubmubix/fakenetbios

Simulate Windows NetBIOS hosts on a LAN for network reconnaissance, NBNS spoofing, and honeypot integration. Standalone or honeyd-compatible tools…

dns-analysisids-ips-evasionimpersonation-tools+3
43
13 years ago
CVE-2019-13498 preview

CVE-2019-13498

GitHubfurqankhan1/cve-2019-13498

MITM exploit demonstrating HSTS bypass and credential theft via SSL strip and JavaScript injection to steal username, password, and OTP from a web…

exploitationids-ips-evasionimpersonation-tools+3
96 years ago
cve-2022-27438 preview

cve-2022-27438

GitHubgar-re/cve-2022-27438

Proof-of-concept exploit for CVE-2022-27438, demonstrating remote code execution via spoofed update server in Advanced Installer 19.3. Includes DNS…

dns-analysisexploitationids-ips-evasion+3
3 years ago
CVE-2023-4279 preview

CVE-2023-4279

GitHubb0marek/cve-2023-4279

Proof-of-concept exploit for CVE-2023-4279, demonstrating IP address spoofing in the User Activity Log WordPress plugin by manipulating the Client-Ip…

exploitationids-ips-evasionimpersonation-tools+3
2 years ago
informer preview

informer

GitHubpaulpierre/informer

A Telegram Mass Surveillance Bot in Python

crawlerdata-exfiltrationimpersonation-tools+3
1.7k10 months ago
CVE-2023-4631 preview

CVE-2023-4631

GitHubb0marek/cve-2023-4631

Proof-of-concept demonstrating IP address spoofing in DoLogin Security WordPress plugin (CVE-2023-4631) via X-Forwarded-For header to bypass login…

ids-ips-evasionimpersonation-toolsinformation-gathering+2
2 years ago
bad_ducky preview

bad_ducky

GitHubmharjac/bad_ducky

Rubber Ducky compatible clone based on CJMCU BadUSB HW.

hardware-hackingids-ips-evasionimpersonation-tools+5
3018 years ago
RIUS preview

RIUS

GitHubzadewg/rius

CVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing

ids-ips-evasionimpersonation-toolsphishing+3
864 years ago
CVE-2023-4281 preview

CVE-2023-4281

GitHubb0marek/cve-2023-4281

Proof-of-concept demonstrating IP address spoofing in the Activity Log WordPress plugin (CVE-2023-4281) by manipulating the Client-Ip header during…

ids-ips-evasionimpersonation-toolsinformation-gathering+2
2 years ago
SocialFish preview

SocialFish

GitHubundeadsec/socialfish

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

command-and-controleducationids-ips-evasion+9
4.8k3 months ago
incriminator preview

incriminator

GitHubkernelfl00d/incriminator

Educational red-teaming tool that frames target devices during simulated cybercrimes using DHCP spoofing, proxy manipulation, and MAC address…

educationimpersonation-toolslateral-movement+2
38 years ago
r4ven preview

r4ven

GitHubspyboy-productions/r4ven

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

educationimpersonation-toolsinformation-gathering+4
1.5k7 months ago
lutlol preview

lutlol

GitHubmagisterquis/lutlol

Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025

command-and-controleducationids-ips-evasion+3
389 months ago
Malicious-MCP preview

Malicious-MCP

GitHubquinnbast/malicious-mcp

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...

ai-securitycommand-and-controldata-exfiltration+8
84 months ago
AndroidFaker preview

AndroidFaker

GitHubandroid1500/androidfaker

Android Faker a Simple Xposed Module Which Spoof Your Device IDs Values. Supporting Android 8.1+

android-securityfingerprint-spoofingimpersonation-tools+3
72211 months ago
toastfix-demo preview

toastfix-demo

GitHubh4lpy/toastfix-demo

Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…

educationimpersonation-toolslabs-practice+5
184 months ago
Previous123456Next