Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
Bug-Bounty-Arsenal-v.3 preview

Bug-Bounty-Arsenal-v.3

GitHubfoxvr-sudo/bug-bounty-arsenal-v.3

50+ detectors across 10 categories, with continuous monitoring built in: schedule recurring scans, get alerted only on new findings, track your…

api-security-testingcrawlerdevsecops+8
12
1 month ago
BurpSuite_Pro_v1.7.37 preview

BurpSuite_Pro_v1.7.37

GitHubjas502n/burpsuite_pro_v1.7.37

Comprehensive web application security testing platform featuring advanced scanning engine, intercepting proxy, and automated vulnerability detection…

api-security-testinginformation-gatheringpenetration-testing+4
567 years ago
fuxi preview

fuxi

GitHubjeffzh3ng/fuxi

Cross-platform penetration testing platform with Docker support, web-based interface, and API for automated vulnerability scanning and security…

information-gatheringpenetration-testingvulnerability-scanners+1
1.3k6 years ago
CVE-2024-4879 preview

CVE-2024-4879

GitHub0xwhoami35/cve-2024-4879

Exploit script for ServiceNow CVE-2024-4879 that enables unauthenticated remote code execution, with mass target scanning and database dumping…

database-securityexploitationinformation-gathering+3
1 year ago
rugmuncher-backend preview

rugmuncher-backend

GitLabcryptorugmuncher/rugmuncher-backend

Real-time crypto intelligence platform for token scanning, wallet forensics, multi-chain market data, and scam detection across 96 blockchains via a…

cryptographyinformation-gatheringosint
1 month ago
osintnet-public preview

osintnet-public

GitHubosintnet/osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, image intelligence and AI image detection.

ai-securitydigital-forensicsdns-analysis+8
12 months ago
DockerSpy preview

DockerSpy

GitHubundeadsec/dockerspy

Scans Docker Hub images using regex patterns to extract exposed secrets, private keys, and authentication tokens for security auditing and incident…

container-securityinformation-gatheringosint+1
2472 years ago
Sn1per preview

Sn1per

GitHub1n3/sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

devsecopsexploit-frameworksinformation-gathering+7
11.2k1 month ago
PAKURI preview

PAKURI

GitHub01rabbit/pakuri

Semi-automated penetration testing framework with TUI, integrating Nmap, OpenVAS, Metasploit, and Faraday for streamlined information gathering,…

educationexploit-frameworksinformation-gathering+3
1414 years ago
fleet preview

fleet

GitHubfleetdm/fleet

Open-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…

cloud-securityconfiguration-auditingdefensive-tools+4
6.8k9h 5m ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubbigb0x/cve-2024-6387

Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.

educationinformation-gatheringnetwork-security+3
352 years ago
network-attack-detection preview

network-attack-detection

GitHublucadibello/network-attack-detection

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

anomaly-detectioneducationinformation-gathering+5
133 years ago
FTP-vsFTPD-CVE-2011-2523-VAPT-Report preview

FTP-vsFTPD-CVE-2011-2523-VAPT-Report

GitHubsonalisarkar-2003/ftp-vsftpd-cve-2011-2523-vapt-report

VAPT report for vsFTPd 2.3.4 backdoor CVE-2011-2523, covering Nmap vulnerability scanning, Metasploit exploitation, post-exploitation root access,…

educationexploitationexploit-frameworks+5
19 days ago
Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP preview

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

GitHubmurataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmap

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)

educationinformation-gatheringnetwork-mapping+3
26 years ago
PHP-CGI-RCE-Scanner preview

PHP-CGI-RCE-Scanner

GitHubywchen-ntust/php-cgi-rce-scanner

Scanning CVE-2024-4577 vulnerability with a url list.

educationexploitationinformation-gathering+3
111 months ago
CVE-2025-4380 preview

CVE-2025-4380

GitHubr0otk3r/cve-2025-4380

Python exploit for CVE-2025-4380, a Local File Inclusion vulnerability in the Ads Pro WordPress plugin. Supports single and mass target scanning with…

educationexploitationinformation-gathering+3
1 year ago
CVE-2024-27954 preview

CVE-2024-27954

GitHubr0otk3r/cve-2024-27954

Python-based scanner for CVE-2024-27954, a Local File Inclusion vulnerability in the WordPress wp-automatic plugin. Supports multithreaded scanning,…

educationexploitationinformation-gathering+3
1 year ago
pd-agent preview

pd-agent

GitHubprojectdiscovery/pd-agent

ProjectDiscovery Cloud - Agent

cloud-securitycontainer-securitydns-analysis+6
135 days ago
Previous12Next