Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2896 results

SimpleRmiDiscoverer

marcin-wolak/simplermidiscoverer

Simple JMX RMI scanning tool

api-security-testinginformation-gatheringmisconfiguration+2

2 years ago

mqxss

grampae/mqxss

Hooked browser communication over MQTT

command-and-controlinformation-gatheringpayload-generation+4

82 years ago

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

nxploited/essential-blocks-4.4.3---unauthenticated-local-file-inclusion

The plugin does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to…

exploitationinformation-gatheringpenetration-testing+3

1 year ago

pywhatcms

gonzosint/pywhatcms

Python client for the WhatCMS.org API to detect 467+ Content Management Systems by domain query, returning name, version, and confidence score for…

information-gatheringosintvulnerability-scanners

405 years ago

Joomla3.7-SQLi-CVE-2017-8917

brianwrf/joomla3.7-sqli-cve-2017-8917

Joomla 3.7 SQL injection (CVE-2017-8917)

exploitationinformation-gatheringreconnaissance+2

79 years ago

graphicator

cybervelia/graphicator

Automated GraphQL schema enumeration and data extraction tool that iterates introspection documents, reconstructs queries, and saves responses for…

api-security-testinginformation-gatheringpenetration-testing+1

1343 years ago

CVE-2014-0160-Scanner

obayesshelton/cve-2014-0160-scanner

PHP CLI script to scan domains for the CVE-2014-0160 (Heartbleed) vulnerability using an external API service.

exploitationinformation-gatheringpenetration-testing+2

12 years ago

xsubfind3r

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

dns-subdomain-enumerationinformation-gatheringosint+2

1209 months ago

AzureGraph

joelgmsec/azuregraph

PowerShell tool for enumerating Azure AD users, devices, applications, and domains via Microsoft Graph API, with offline data export capability.

cloud-securityinformation-gatheringosint+1

823 years ago

jsecret

raoufmaklouf/jsecret

Fast Go-based static scanner for detecting sensitive data (API keys, tokens, passwords) in JavaScript files and source code using regex patterns.

code-analysisinformation-gatheringsecret-detection+2

422 years ago

CVE-2020-17519

murataydemir/cve-2020-17519

[CVE-2020-17519] Apache Flink RESTful API Arbitrary File Read

exploitationexploit-frameworksinformation-gathering+3

85 years ago

CVE-2024-41628

redshift-cybersecurity/cve-2024-41628

Python exploit script for CVE-2024-41628, a Local File Inclusion vulnerability in ClusterControl CMON API (ports 9500/9501). Retrieves arbitrary…

exploitationinformation-gatheringpenetration-testing+3

22 years ago

Cr3dOv3r

d4vinci/cr3dov3r

Know the dangers of credential reuse attacks.

information-gatheringosintpassword-attacks+1

2.1k9 months ago

feroxbuster

epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

api-securityapi-security-testingcrawler+8

8.1k3 days ago

wafw00f

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

crawlerdynamic-code-analysisinformation-gathering+6

6.5k4 months ago

sentrysearch

ssrajadh/sentrysearch

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

digital-forensicsforensicsinformation-gathering+3

4.5k17 days ago

fofa_viewer

wgpsec/fofa_viewer

A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

information-gatheringosintpenetration-testing+2

1.8k8 months ago

netlas-cookbook

netlas-io/netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…

curated-resourcesdigital-forensicseducation+9

8881 year ago

Previous12…100 Next