Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
330 results
ncentral-compromise-ioc-triage preview

ncentral-compromise-ioc-triage

GitHubcreamyg31337/ncentral-compromise-ioc-triage

Read-only N-able N-central CVE-2026-18556/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints

defensive-toolsdigital-forensicsincident-response+4
1 month ago
MOVEit_CVE-2023-34362_IOCs preview

MOVEit_CVE-2023-34362_IOCs

GitHubdeepinstinct/moveit_cve-2023-34362_iocs

CVE-2023-34362-IOCs. More information on Deep Instinct's blog site.

educationforensicsincident-response+3
23 years ago
CVE-2022-47966_checker preview

CVE-2022-47966_checker

GitHubace-responder/cve-2022-47966_checker

Run on your ManageEngine server

forensicsincident-responseioc-management+3
23 years ago
react2shell-scanner-CVE-2025-55182 preview

react2shell-scanner-CVE-2025-55182

GitHubsecurity-phoenix-demo/react2shell-scanner-cve-2025-55182

React2shell-web-scanner

educationexploitationioc-management+6
28 months ago
hexalocker-analysis preview

hexalocker-analysis

GitHubsynacktiv/hexalocker-analysis

HexaLocker ransomware analysis

ioc-managementmalware-analysisthreat-intelligence
22 years ago
wp2shell-compromise-scanner-plugin preview

wp2shell-compromise-scanner-plugin

GitHubeyesecurity/wp2shell-compromise-scanner-plugin

Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)

database-securitydigital-forensicsforensics+5
1 month ago
cve-2025-8088 preview

cve-2025-8088

GitHubtravisbgreen/cve-2025-8088

cve-2025-8088_detection

exploitationintrusion-detectionioc-management+3
11 year ago
ToolShell-Honeypot preview

ToolShell-Honeypot

GitHubbitsalv/toolshell-honeypot

Honeypot for CVE-2025-53770 aka ToolShell

incident-responseintrusion-detectionioc-management+5
1 year ago
ToolShellFinder preview

ToolShellFinder

GitHubzach115th/toolshellfinder

Scans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771

digital-forensicsforensicsincident-response+5
9 months ago
exchange_webshell_detection preview
Archived

exchange_webshell_detection

GitHubcert-lv/exchange_webshell_detection

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857,…

forensicsincident-responseioc-management+3
995 years ago
check-your-pulse preview
Archived

check-your-pulse

GitHubcisagov/check-your-pulse

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

forensicsincident-responseioc-management+3
286 years ago
ioccheck preview
Archived

ioccheck

GitHubranguli/ioccheck

A tool for simplifying the process of researching IOCs.

defensive-toolshash-analysisinformation-gathering+3
254 years ago
omnibus preview

omnibus

GitHubinquest/omnibus

The OSINT Omnibus (beta release)

information-gatheringioc-managementosint+2
3596 years ago
destroylist preview

destroylist

GitHubphishdestroy/destroylist

Real-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats

curated-resourcesdefensive-toolsdns-analysis+8
1.7k11h 28m ago
IoCs preview

IoCs

GitHubsophoslabs/iocs

Sophos-originated indicators-of-compromise from published reports

curated-resourcesioc-managementmalware-analysis+1
67019 days ago
yara-x preview

yara-x

GitHubvirustotal/yara-x

A rewrite of YARA in Rust.

binary-analysisdata-recoverydefensive-tools+14
1.3k10 days ago
investigations preview

investigations

GitHubamnestytech/investigations

Indicators of Compromise from Amnesty International's cyber investigations

forensicsinformation-gatheringioc-management+3
1.7k1 year ago
Unit42-timely-threat-intel preview

Unit42-timely-threat-intel

GitHubpaloaltonetworks/unit42-timely-threat-intel

A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.

ioc-managementthreat-feeds-aggregatorsthreat-intelligence
5982 days ago
Previous1…131415…19Next