Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

111 results

process-watcher

neo23x0/process-watcher

A process monitoring tool that tries to detect exploitation

defensive-toolsdynamic-analysis-sandboxingincident-response+4

3 days ago

Archived

leaky-vessels-dynamic-detector

snyk/leaky-vessels-dynamic-detector

eBPF-based runtime detector for container breakout vulnerabilities in runc and Docker, monitoring syscalls and Docker daemon calls to detect…

cloud-securitycontainer-securitydefensive-tools+3

1051 year ago

Archived

CVE-2021-41773_Honeypot

lopqto/cve-2021-41773_honeypot

Lightweight honeypot for Apache HTTP Server path traversal vulnerability CVE-2021-41773, designed to capture and log exploitation attempts.

defensive-toolsintrusion-detectionthreat-intelligence+2

25 years ago

Archived

webhook-cve-2022-0811

spiarh/webhook-cve-2022-0811

Simple webhook to block exploitation of CVE-2022-0811

cloud-securitycontainer-securitydevsecops+3

84 years ago

Archived

heyserial

mandiant/heyserial

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

curated-resourceseducationexploitation+6

1423 years ago

log4shell-rex

back2root/log4shell-rex

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

incident-responseintrusion-detectionioc-management+3

2914 years ago

vedas-signatures

arpsyndicate/vedas-signatures

VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 14,000 CVEs

curated-resourcesdefensive-toolsintrusion-detection+8

231 day ago

suricata-vedas

arpsyndicate/suricata-vedas

VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 14,000 CVEs

exploit-frameworksintrusion-detectionmachine-learning+2

231 day ago

ripple20

corelight/ripple20

A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

anomaly-detectionintrusion-detectioniot-security+3

324 years ago

dirtypipe-ebpf_detection

airbus-cert/dirtypipe-ebpf_detection

An eBPF detection program for CVE-2022-0847

container-securitydefensive-toolsintrusion-detection+1

294 years ago

NetCrackPi

cisc0-gif/netcrackpi

RPi3+ Network Cracker Setup Tool

educationintrusion-detectionnetwork-security+5

46 years ago

bro-shellshock

corelight/bro-shellshock

ShellShock attack and exploit detector for Bro.

intrusion-detectionnetwork-securityvulnerability-analysis+1

29 years ago

CVE-2026-8838-Mitigation-and-Detection

sana-404/cve-2026-8838-mitigation-and-detection

Detection and mitigation scripts for CVE-2026-8838, providing vulnerability scanning, configuration auditing, and incident response guidance to…

configuration-auditingincident-responseintrusion-detection+3

2 months ago

activemq-ids-ips-lab

trnguyen03/activemq-ids-ips-lab

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

educationexploit-frameworksids-ips-evasion+6

5 months ago

ToolShell-Honeypot

bitsalv/toolshell-honeypot

Honeypot for CVE-2025-53770 aka ToolShell

incident-responseintrusion-detectionioc-management+5

1 year ago

Labtainers

mfthomps/labtainers

Labtainers: A Docker-based cyber lab framework

binary-exploitationcryptographyctf+9

31628 days ago

Log4Pot

thomaspatzke/log4pot

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

intrusion-detectionlog-analysispayload-generation+2

941 year ago

Google-chrome-zero-day

muhammednihalmp/google-chrome-zero-day

CVE-2025-6554

binary-exploitationctfeducation+6

1311 months ago

Previous 1 2 3 4 567 Next