Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

209 results

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

ai-securitycommand-and-controlinformation-gathering+7

16 days ago

neko-master

foru17/neko-master

A modern and elegant dashboard for network traffic visualization and analysis.

information-gatheringlog-analysisnetwork-mapping+3

4.1k1 month ago

GitLabSniper

ynsmroztas/gitlabsniper

Single-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…

data-exfiltrationexploitationinformation-gathering+6

714 days ago

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

rhimavanth32-max/metasploitable2-reconnaissance-and-unrealircd-backdoor-exploitation

End-to-end recon and exploitation of a known backdoor (CVE-2010-2075) on Metasploitable2 using Nmap and Metasploit.

ctfeducationexploitation+7

15 days ago

evillimiter

davidsonrafaelk/evillimiter

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

ids-ips-evasioninformation-gatheringnetwork-mapping+4

821 days ago

cve-2026-20127

gigachadusers/cve-2026-20127

Windows-based C++ network scanner that fingerprints Cisco SD-WAN/vManage services and checks for CVE-2026-20127 exposure via HTTP endpoint analysis.

information-gatheringnetwork-securitypenetration-testing+2

25 months ago

CVE-2026-7071-access-Control

xmyronn/cve-2026-7071-access-control

Proof of concept demonstrating unauthenticated access to user resumes via directory listing in CodeAstro Online Job Portal, with reproduction steps…

exploitationinformation-gatheringpenetration-testing+2

5 months ago

Mass-Scanner-CVE-2026-2631

anggatechi/mass-scanner-cve-2026-2631

Async mass-checker for authorized internal testing of CVE-2026-2631 exposure.

exploitationinformation-gatheringpenetration-testing+2

25 months ago

CVE-2026-21440

you-ssef9/cve-2026-21440

Detection-only PoC for CVE-2026-21440 in AdonisJS BodyParser. Fingerprints AdonisJS indicators, probes upload endpoints via GET, and outputs…

information-gatheringreconnaissancevulnerability-analysis+1

18 months ago

Redpoint

digitalbond/redpoint

Nmap NSE scripts for ICS/SCADA discovery and enumeration—BACnet, EtherNet/IP, CoDeSys, Fox, Modicon, Omron, S7—using protocol queries for security…

information-gatheringnetwork-securitypenetration-testing+2

47110 years ago

criticality_score

ossf/criticality_score

Computes a criticality score for open source projects from repository, contributor, and dependency metrics to prioritize security improvements.

information-gatheringpapers-researchsupply-chain-security+1

1.5k1 month ago

BloodBash

squidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

cloud-securityconfiguration-auditingidentity-access-management+6

4921 month ago

CVE-2026-48908-by-yora

yora1928/cve-2026-48908-by-yora

Passive security checker for CVE-2026-48908 affecting SP Page Builder.

exploitationinformation-gatheringpayload-generation+7

21 month ago

OSINT_Inception-links

c3n7ral051nt4g3ncy/osint_inception-links

Current links from the OSINT Inception start-me project

curated-resourcesdigital-forensicseducation+3

2213 years ago

aardwolf

skelsec/aardwolf

Asynchronous RDP client for Python (headless)

authenticationinformation-gatheringlateral-movement+5

2401 month ago

qscan

0xor0ne/qscan

Quick network scanner library. https://crates.io/crates/qscan

information-gatheringnetwork-mappingnetwork-security+3

943 years ago

433Screen-SignalHacker

luispl77/433screen-signalhacker

Full duplex 433 MHz Signal jammer, recorder, decoder and hacking multitool device based on ESP32 microcontroller and RFM69HW radios. This version of…

embedded-systems-securityexploitationhardware-hacking+3

1232 months ago

react

janhalendk/react

A OSINT project that explores how to dump data from React

educationinformation-gatheringosint+2

821 year ago

Previous12…12 Next