Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

103 results

memory-carving-scripts

withsecurelabs/memory-carving-scripts

Scripts for extracting useful information from infected memory dumps

digital-forensicsforensicsincident-response+2

8 years ago

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

mrk336/inside-cve-2026-20805-how-a-windows-dwm-flaw-exposed-sensitive-data

CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS…

educationexploitationincident-response+2

7 months ago

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

fevar54/cve-2026-3502-scanner---trueconf-vulnerability-detection-tool

Scanner de CVE-2026-3502: detecta clientes TrueConf vulnerables e IOCs de TrueChaos. Reportes JSON/HTML/CSV.

defensive-toolsincident-responseinformation-gathering+3

5 months ago

awesome-cybersecurity-blueteam

fabacab/awesome-cybersecurity-blueteam

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

cloud-securitycontainer-securitycurated-resources+8

5.5k2 years ago

misp-objects

misp/misp-objects

Curated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…

curated-resourcesincident-responseioc-management+3

11019 days ago

Threat-Remediation-Scripts

xephora/threat-remediation-scripts

This repository contains a list of new remediation scripts.

defensive-toolsdigital-forensicsincident-response+5

1941 month ago

misp-taxonomies

misp/misp-taxonomies

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

curated-resourcesincident-responseioc-management+2

3038 days ago

infosec-interview-questions

pbnj/infosec-interview-questions

🗒️ A [work-in-progress] collection for interview questions for Information Security roles

cryptographycurated-resourceseducation+6

1383 years ago

MSRPC-to-ATTACK

jonny-jhnson/msrpc-to-attack

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

curated-resourcesdefensive-toolseducation+3

3503 years ago

Awesome-BEC

randomaccess3/awesome-bec

Repository of attack and defensive information for Business Email Compromise investigations

cloud-securitycurated-resourcesdigital-forensics+7

2792 months ago

detections

randomaccess3/detections

Curated repository of detection information and validation guidance for identifying malicious activity in enterprise environments.

curated-resourcesincident-responseintrusion-detection+1

515 months ago

RDPLinkEnum

al1ex/rdplinkenum

RDPLinkEnum

digital-forensicsforensicsincident-response+3

55 years ago

Cyber-Defence

nccgroup/cyber-defence

Information released publicly by NCC Group's Cyber Incident Response Team

curated-resourcesdigital-forensicsincident-response+1

4744 years ago

ImpossibleTravelLogAnalysis

nccgroup/impossibletravelloganalysis

Basic log analysis tool to detect impossible travel via IP address geographic information

anomaly-detectionforensicsincident-response+3

207 years ago

ransomware-simulator

nccgroup/ransomware-simulator

NCC Group Ransomware Simulator

defensive-toolseducationincident-response+3

7010 years ago

Zeek-CVE-Enrichment

corelight/zeek-cve-enrichment

Zeek script and Python utility to enrich network security monitoring logs with CVE identifiers for improved threat intelligence and vulnerability…

incident-responseioc-managementlog-analysis+3

11 year ago

Cortex

thehive-project/cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

digital-forensicsincident-responseinformation-gathering+5

1.6k2 months ago

Metamorph

synacktiv/metamorph

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

defensive-toolsincident-responseinformation-gathering+3

83 months ago

Previous12 3 4 5 6 Next