Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
19 results
maltrail preview

maltrail

GitHubstamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

defensive-toolsdns-analysisinformation-gathering+5
8.6k8h 16m ago
CVE-2025-61148 preview

CVE-2025-61148

GitHubsharma19d/cve-2025-61148

The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized…

api-security-testingeducationinformation-gathering+3
8 months ago
Wordpress-CVE-2020-35749 preview

Wordpress-CVE-2020-35749

GitHubm4xsec/wordpress-cve-2020-35749

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

exploitationinformation-gatheringpenetration-testing+2
64 years ago
CVE-2025-56499 preview

CVE-2025-56499

GitHubcherrling/cve-2025-56499
exploitationinformation-gatheringlog-analysis+3
9 months ago
CVE-2022-0739 preview

CVE-2022-0739

GitHubelganz0/cve-2022-0739

BookingPress < 1.0.11 - Unauthenticated SQL Injection

exploitationinformation-gatheringpenetration-testing+2
3 years ago
IP-Biter preview

IP-Biter

GitHubdamianofalcioni/ip-biter

IP-Biter: The Hacker-friendly E-Mail (but not only) Tracking Framework

email-securityinformation-gatheringosint+1
3261 year ago
CVE-2024-46987 preview

CVE-2024-46987

GitHubadvaitpathak21/cve-2024-46987

Exploit created using Python

educationexploitationinformation-gathering+3
16 months ago
SkyProfile preview

SkyProfile

GitHubalsatianconsulting/skyprofile

A lightweight aviation intelligence tool that queries ADSB-Exchange flight data using tail numbers or ICAO identifiers to quickly profile aircraft…

data-exfiltrationinformation-gatheringosint+3
97 months ago
o365-attack-toolkit preview

o365-attack-toolkit

GitHubmdsecactivebreach/o365-attack-toolkit

A toolkit to attack Office365

cloud-securitydata-exfiltrationemail-security+5
1.1k5 years ago
IMAPLoginTester preview

IMAPLoginTester

GitHubrm1984/imaplogintester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…

email-securityinformation-gatheringpassword-attacks+1
732 years ago
CVE-2026-66066 preview

CVE-2026-66066

GitHubhackspeak/cve-2026-66066

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing

exploitationinformation-gatheringpenetration-testing+5
215 days ago
CVE-2019-5418 preview

CVE-2019-5418

GitHubmpgn/cve-2019-5418

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

educationexploitationinformation-gathering+3
2015 years ago
CVE-2023-23138 preview

CVE-2023-23138

GitHubomaratallahh/cve-2023-23138

short view of ruby on rails properties misconfiguration

information-gatheringmisconfigurationpenetration-testing+2
23 years ago
metasploit-framework preview
Archived

metasploit-framework

GitHubmarkoarmitage/metasploit-framework

app turn nil publics and privates into blanks 3 months ago config Use bundler/setup for more graceful bundler related failures 11 days ago data…

command-and-controlexploitationexploit-frameworks+8
55 years ago
getrails preview

getrails

GitHubjul10l1r4/getrails

Get trails lib: Get all urls indexed of target

dns-subdomain-enumerationinformation-gatheringosint+1
4 years ago
ALPC-Enumerator preview

ALPC-Enumerator

GitHubtalha-nazeef-ahmed/alpc-enumerator

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

digital-forensicsinformation-gatheringmalware-analysis+4
247 days ago
skytrack preview

skytrack

GitHubang13t/skytrack

Command-line aircraft OSINT tool for gathering tail numbers, ICAO codes, flight logs, and owner details from public aviation data sources, with PDF…

information-gatheringosintreconnaissance
5362 years ago
cve-2014-0130 preview

cve-2014-0130

GitHubomarkurt/cve-2014-0130

cve-2014-0130 rails directory traversal vuln

information-gatheringpenetration-testingreconnaissance+2
189 years ago
Previous12Next