Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
CVE-2024-23897 preview

CVE-2024-23897

GitHubh4x0r-dz/cve-2024-23897

Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…

exploitationinformation-gatheringpenetration-testing+3
209
2 years ago
telegram-osint-lib preview

telegram-osint-lib

GitHubpostuf/telegram-osint-lib

PHP library for executing Telegram OSINT scenarios: search users, parse group members, monitor online status, download photos, and track profile…

information-gatheringosintreconnaissance+1
3192 years ago
SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker preview

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

GitHubmr-whiskerss/ssh-terrapin-prefix-truncation-weakness-cve-2023-48795-checker

Lightweight Python scanner for CVE-2023-48795 (SSH Terrapin prefix truncation). Performs passive banner grab and KEXINIT parse to detect vulnerable…

exploitationinformation-gatheringnetwork-security+3
13 months ago
NTLMRawUnHide preview

NTLMRawUnHide

GitHubmlgualtieri/ntlmrawunhide

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

forensicsinformation-gatheringnetwork-security+2
3952 years ago
wifi_db preview

wifi_db

GitHubr4ulcl/wifi_db

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…

forensicsinformation-gatheringpassword-cracking+2
1422 months ago
assets-from-spf preview

assets-from-spf

GitHub0xbharath/assets-from-spf

A Python script to parse net blocks & domain names from SPF record

dns-analysisinformation-gatheringnetwork-mapping+2
846 years ago
exif-gps-tracer preview

exif-gps-tracer

GitHubm0n1x90/exif-gps-tracer

A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in…

digital-forensicsforensicsinformation-gathering+2
445 years ago
aced preview

aced

GitHubgarrettfoster13/aced

Parses and resolves a single Active Directory principal's DACL to identify inbound access privileges, resolve SIDs, and log LDAP attributes for…

information-gatheringpenetration-testingprivilege-escalation+1
2031 year ago
domains-from-csp preview

domains-from-csp

GitHub0xbharath/domains-from-csp

A script to extract domain names from Content Security Policy(CSP) headers

dns-analysisinformation-gatheringnetwork-mapping+5
1137 years ago
HashTag preview

HashTag

GitHubsmeegesec/hashtag

Password Hash Identification

digital-forensicsforensicshash-analysis+3
2247 months ago
Firebase-Extractor preview

Firebase-Extractor

GitHubviperbluff/firebase-extractor

A tool written in python for scraping firebase data

data-exfiltrationinformation-gatheringmobile-security+2
436 years ago
Jquery-File-Tree-1.6.6-Path-Traversal preview

Jquery-File-Tree-1.6.6-Path-Traversal

GitHubnickguitar/jquery-file-tree-1.6.6-path-traversal

Jquery File Tree 1.6.6 Path Traversal exploit (CVE-2017-1000170)

information-gatheringpenetration-testingreconnaissance+2
45 years ago
ODBParser preview

ODBParser

GitHubcitcheese/odbparser

OSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing

database-securitydata-exfiltrationinformation-gathering+2
476 years ago
SniffAir preview

SniffAir

GitHubtylous/sniffair

A framework for wireless pentesting.

exploitationinformation-gatheringpenetration-testing+3
1.2k5 years ago
WhoamiAlternatives preview

WhoamiAlternatives

GitHubricardojoserf/whoamialternatives

Different methods to get current username without using whoami

information-gatheringmalware-analysispost-exploitation+2
1872 years ago
LeakSearch preview

LeakSearch

GitHubjoelgmsec/leaksearch

Searches and parses plaintext passwords from public breach databases (ProxyNova COMB) by keyword (user/domain/password), with proxy support and…

data-exfiltrationinformation-gatheringosint+1
4421 year ago
zeek-openvpn preview

zeek-openvpn

GitHubcorelight/zeek-openvpn

A Zeek OpenVPN protocol analyzer plugin.

defensive-toolsinformation-gatheringintrusion-detection+3
73 years ago
spraykatz preview

spraykatz

GitHubaas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

information-gatheringlateral-movementpenetration-testing+1
7836 years ago
Previous12Next