Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

12 results

CVE-2019-10779

republicr0k/cve-2019-10779

GCHQ Stroom is vulnerable to Cross-Site Scripting due to the ability to load the Stroom dashboard on another site and insufficient protection against…

information-gatheringpenetration-testingvulnerability-analysis+1

5 years ago

Identificador-CVE-2018-11759

julioliraup/identificador-cve-2018-11759

Bash script to detect and exploit CVE-2018-11759 in Apache Tomcat instances, with audit logging of target load balancer details, internal addresses,…

exploitationinformation-gatheringvulnerability-scanners+1

2 years ago

Archived

metasploit-framework

markoarmitage/metasploit-framework

app turn nil publics and privates into blanks 3 months ago config Use bundler/setup for more graceful bundler related failures 11 days ago data…

command-and-controlexploitationexploit-frameworks+8

55 years ago

PowerHuntShares

netspi/powerhuntshares

Audits Active Directory SMB shares to inventory, analyze, and report excessive privileges. Discovers accessible systems, enumerates share ACLs,…

configuration-auditinginformation-gatheringnetwork-security+2

1.1k0 years ago

PANO

alw1ez/pano

Graph-based OSINT investigation platform with timeline analysis, entity management, and AI-powered transforms for uncovering hidden connections…

ai-securityinformation-gatheringosint+1

6177 months ago

M365Pwned

otterhacker/m365pwned

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

data-exfiltrationexploitationimpersonation-tools+5

2517 months ago

linkedin-extension-fingerprinting

mdp/linkedin-extension-fingerprinting

Documents and identifies 2,953 Chrome extensions silently probed by LinkedIn, providing tools to fetch extension names and analyze browser…

data-exfiltrationfingerprint-spoofinginformation-gathering+4

2168 months ago

MysqlHoneypot

al1ex/mysqlhoneypot

MysqlHoneypot

defensive-toolsinformation-gatheringintrusion-detection+2

244 years ago

CVE-2018-6389

omidsec/cve-2018-6389

PoC Exploit CVE-2018-6389

exploitationinformation-gatheringpenetration-testing+2

710 months ago

CNVD-2020-10487-Bulk-verification

delsadan/cnvd-2020-10487-bulk-verification

CNVD-2020-10487 OR CVE-2020-1938 批量验证脚本，批量验证，并自动截图，方便提交及复核

exploitationinformation-gatheringpenetration-testing+2

36 years ago

CVE-2025-2294

nxploited/cve-2025-2294

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

educationexploitationinformation-gathering+3

31 year ago

AVX-Side-Channel

bytereaper77/avx-side-channel

AVX-Based Timing Side Channel — ASLR Detection

educationhardware-securityinformation-gathering+1

11 year ago