Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
2541 results
waf-dojo preview

waf-dojo

GitHubnishikawaakira/waf-dojo

Hands-on AWS WAF training game with tutorials, scored labs, and exams where players write Web ACL rules to block real attack shapes while avoiding…

cloud-securityctfdefensive-tools+7
182 days ago
AI-Red-Teaming-Guide preview

AI-Red-Teaming-Guide

GitHubrequie/ai-red-teaming-guide

A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before attackers…

adversarial-attackai-securitycurated-resources+9
1.0k5 days ago
TryHackMe-Roadmap preview

TryHackMe-Roadmap

GitHubhunterdii/tryhackme-roadmap

Hello, aspiring hackers! 🕵️‍♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absolutely free,…

ctfcurated-resourceseducation+8
5471 month ago
CVE-2026-109618-exploit preview

CVE-2026-109618-exploit

GitHubiamlucif3r/cve-2026-109618-exploit

[PHP2Shell] Golang exploit for CVE-2026-109618 / CVE-2026-109619: Unauthenticated RCE in PHP 5.4–8.5.11 via OOM corruption + session.upload_progress…

exploitationlabs-practicememory-forensics+4
5 days ago
work1-secure-api preview

work1-secure-api

GitHubght657/work1-secure-api

HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis

api-securityauthentication-authorizationdevsecops+7
6 days ago
redStack preview

redStack

GitHubdevzero-security/redstack

Terraform-deployed red team operator lab on AWS: Mythic, Sliver, and Adaptix C2 behind a production-style Apache redirector, with Kali/Windows hosts…

cloud-infrastructure-securitycommand-and-controleducation+8
2861 month ago
alignment-cage-challenge-2 preview

alignment-cage-challenge-2

GitHubitm-kitware/alignment-cage-challenge-2

CybORG CAGE 2 environment updated for the paper "Alignment of Autonomous Cyber Defense Agents via Adaptive Policy Shaping"

ai-securitydefensive-toolseducation+6
14 days ago
ats-authproxy-prefix preview

ats-authproxy-prefix

GitHubabraxas/ats-authproxy-prefix

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - authproxy prefix

authentication-authorizationexploitationlabs-practice+3
5 days ago
ats-cripts-rri-uaf preview

ats-cripts-rri-uaf

GitHubabraxas/ats-cripts-rri-uaf

Apache Traffic Server 10.2.0 - High - Remote - Crash - Cripts From/To URL UAF

exploitationlabs-practicevulnerability-analysis+1
20 days ago
ats-esi-unix-recvport preview

ats-esi-unix-recvport

GitHubabraxas/ats-esi-unix-recvport

Apache Traffic Server 10.2.0 - High - Remote - SSRF - ESI unix recvport

exploitationlabs-practicevulnerability-analysis+2
20 days ago
ats-ipallow-method-case preview

ats-ipallow-method-case

GitHubabraxas/ats-ipallow-method-case

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - ip_allow method case

exploitationlabs-practicenetwork-security+4
5 days ago
ats-jsonrpc-unrestricted preview

ats-jsonrpc-unrestricted

GitHubabraxas/ats-jsonrpc-unrestricted

Apache Traffic Server 10.2.0 - High - Local - Privilege leftover - JSON-RPC unix socket unrestricted mode 0777

information-gatheringlabs-practicemisconfiguration+2
20 days ago
ats-magick-unsigned preview

ats-magick-unsigned

GitHubabraxas/ats-magick-unsigned

Apache Traffic Server 10.2.0 - High - Remote - File write - unsigned magick convert writes as nobody

exploitationinformation-gatheringlabs-practice+3
20 days ago
ats-realip-plugin-acl preview

ats-realip-plugin-acl

GitHubabraxas/ats-realip-plugin-acl

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - realip PLUGIN ACL fail-open

authentication-authorizationlabs-practicemisconfiguration+4
5 days ago
ats-redirect-zero-net preview

ats-redirect-zero-net

GitHubabraxas/ats-redirect-zero-net

Apache Traffic Server 10.2.0 - High - Remote - SSRF - redirect 0.0.0.0/8

exploitationlabs-practicenetwork-security+2
20 days ago
ats-regex-remap-userinfo preview

ats-regex-remap-userinfo

GitHubabraxas/ats-regex-remap-userinfo

Apache Traffic Server 10.2.0 - High - Remote - SSRF - regex_remap noslash $n userinfo origin takeover

exploitationlabs-practicevulnerability-analysis+2
5 days ago
PMA-5.2.3-WebAuthn-2FA preview

PMA-5.2.3-WebAuthn-2FA

GitHubabraxas/pma-5.2.3-webauthn-2fa

phpMyAdmin - High 8.1 - Authenticated POST /index.php - 2FA Bypass

authenticationexploitationlabs-practice+4
227 days ago
network-attack-simulator preview

network-attack-simulator

GitHublhiebert01/network-attack-simulator

Streamlit educational dashboard that simulates port scanning, DoS, brute force and data exfiltration attacks, with visualizations, attack logs and…

educationlabs-practicelog-analysis+2
1 year ago
Previous12…100Next