Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
wpbf preview

wpbf

GitHubdejanlevaja/wpbf

WPBF - a multithreaded WP brute forcer

authenticationinformation-gatheringpassword-attacks+2
512 years ago
Credential-Hunting preview

Credential-Hunting

GitHubnecr00/credential-hunting

CredsHunter - Credential Hunting scripts for Windows and Linux OS

forensicsincident-responseinformation-gathering+7
1751 day ago
DefaultCreds-cheat-sheet preview

DefaultCreds-cheat-sheet

GitHubihebski/defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

curated-resourcesdefensive-toolseducation+6
6.7k1 month ago
CVE-2022-24181 preview

CVE-2022-24181

GitHubcyberhawk000/cve-2022-24181

XSS via Host Header injection and Steal Password Reset Token of another user

information-gatheringpenetration-testingreconnaissance+2
1 year ago
ScannerCVE-2021-3156 preview

ScannerCVE-2021-3156

GitHubsantiagoserrao/scannercve-2021-3156
exploitationinformation-gatheringnetwork-security+3
15 years ago
NextPass preview

NextPass

GitHub0xblarky/nextpass

A tool which can be used to generate password list or dictionary from the details of the target

ai-securityinformation-gatheringpassword-attacks+3
65 months ago
enumpossible preview

enumpossible

GitHuban0nym0u5101/enumpossible

Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability (CVE-2018-15473) in…

exploitationinformation-gatheringpenetration-testing+2
6 years ago
CVE-2023-23752 preview

CVE-2023-23752

GitHub0xwhoami35/cve-2023-23752
authenticationexploitationinformation-gathering+3
21 year ago
cupp preview

cupp

GitHubmebus/cupp

Interactive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…

information-gatheringosintpassword-attacks+1
6.5k1 month ago
m4ngl3m3 preview

m4ngl3m3

GitHublocalh0t/m4ngl3m3

Common password pattern generator using strings list

information-gatheringpassword-attackspassword-cracking+1
1337 years ago
hacktronian preview

hacktronian

GitHubthehackingsage/hacktronian

Tools for Pentesting

exploitationinformation-gatheringpassword-attacks+4
2.2k4 years ago
password-generator preview

password-generator

GitHubtismayil/password-generator

-> Password List Generator for Brute Force.

information-gatheringosintpassword-attacks+1
68 years ago
IMAPLoginTester preview

IMAPLoginTester

GitHubrm1984/imaplogintester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…

email-securityinformation-gatheringpassword-attacks+1
732 years ago
CamOver preview

CamOver

GitHubentysec/camover

CamOver is a camera exploitation tool that allows to disclosure network camera admin password.

exploitationinformation-gatheringiot-security+1
5942 years ago
RomBuster preview

RomBuster

GitHubentysec/rombuster

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

exploitationinformation-gatheringiot-security+1
5592 years ago
DonPAPI preview

DonPAPI

GitHublogin-securite/donpapi

Automated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…

authenticationinformation-gatheringpassword-cracking+3
1.4k1 year ago
HunterScrape preview

HunterScrape

GitHubalexkaos32/hunterscrape

Python script that uses the hunter.io API to scrape email addresses from a target domain, generating a target list for password spraying attacks.

email-harvestinginformation-gatheringosint+1
82 years ago
spraygen preview

spraygen

GitHub3ndg4me/spraygen

Password list generator for password spraying - prebaked with goodies

information-gatheringpassword-attackspassword-cracking+1
1143 years ago
Previous12Next