Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
28 results
meshyface preview

meshyface

GitHubjaronmcd/meshyface

Single-page web dashboard for Meshtastic mesh networks with live network mapping, packet analysis, chat, sensor telemetry, and topology…

dns-analysisinformation-gatheringiot-security+4
127
29 days ago
Gxss preview
Archived

Gxss

GitHubkathanp19/gxss

A tool to check a bunch of URLs that contain reflecting params.

information-gatheringpenetration-testingreconnaissance+2
5992 years ago
sisu preview

sisu

GitHubsemonte/sisu

Mounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+8
479 months ago
hackerbot preview

hackerbot

GitHubomergunal/hackerbot

Chat with hacker assistant

information-gatheringosintpenetration-testing+2
1988 years ago
chatlog preview

chatlog

GitHubsjzar/chatlog

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

database-securityforensicsinformation-gathering+1
9.2k1 year ago
RSC-Detect-CVE-2025-55182 preview

RSC-Detect-CVE-2025-55182

GitHubalptexans/rsc-detect-cve-2025-55182

RSC Detect CVE 2025 55182

educationinformation-gatheringpenetration-testing+3
1907 months ago
telegram-history-dump preview

telegram-history-dump

GitHubtvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…

data-exfiltrationinformation-gatheringosint+1
6808 years ago
PAKURI-THON preview

PAKURI-THON

GitHub01rabbit/pakuri-thon

PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server (command & control and chat & communication server).…

command-and-controlexploit-frameworksinformation-gathering+7
284 years ago
CVE-2025-51865 preview

CVE-2025-51865

GitHubsecsys-fdu/cve-2025-51865

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Ai2's playground chat, allowing attackers to brute-force predictable message…

educationinformation-gatheringpapers-research+3
21 year ago
CVE-2025-51858 preview

CVE-2025-51858

GitHubsecsys-fdu/cve-2025-51858

Documentation of CVE-2025-51858, a self-XSS vulnerability in ChatPlayground.ai enabling JWT theft and account hijacking, combined with an IDOR in…

exploitationinformation-gatheringpenetration-testing+3
11 year ago
CVE-2025-51869 preview

CVE-2025-51869

GitHubsecsys-fdu/cve-2025-51869

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Liner's chat component, allowing attackers to tamper with other users'…

api-securityinformation-gatheringpenetration-testing+3
11 year ago
CVE-2025-51867 preview

CVE-2025-51867

GitHubsecsys-fdu/cve-2025-51867

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI's chat API, allowing attackers to consume other users'…

api-security-testinginformation-gatheringpenetration-testing+3
1 year ago
CVE preview

CVE

GitHubjainil-89/cve

Xss In Tawk.to Live Chat Support (CVE-2025-57483)

exploitationinformation-gatheringpenetration-testing+2
11 year ago
CVE-2025-51859 preview

CVE-2025-51859

GitHubsecsys-fdu/cve-2025-51859

Proof-of-concept demonstrating stored XSS and IDOR in Chaindesk AI agent chat, enabling session token theft and account hijacking.

exploitationinformation-gatheringpenetration-testing+3
1 year ago
CVE-2025-51868 preview

CVE-2025-51868

GitHubsecsys-fdu/cve-2025-51868

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Dippy's chat component, allowing attackers to access and tamper with other…

information-gatheringpenetration-testingvulnerability-analysis+2
1 year ago
tgspyder preview

tgspyder

GitHubdarksight-analytics/tgspyder

CLI tool for structured Telegram OSINT data collection. Scrapes members, messages, invite links, and user metadata from public/private groups,…

crawlerdata-exfiltrationeducation+4
36710 months ago
IP-Biter preview

IP-Biter

GitHubdamianofalcioni/ip-biter

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

email-securityinformation-gatheringosint+1
3272 years ago
brutas preview

brutas

GitHubtasooshi/brutas

Wordlists handcrafted (and automated) with ♥

information-gatheringpassword-attackspassword-cracking+2
2371 year ago
Previous12Next