Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
61 results
seclab-taskflow-agent preview

seclab-taskflow-agent

GitHubgithubsecuritylab/seclab-taskflow-agent

MCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…

ai-assisted-reversingai-securitycode-analysis+9
284
15 days ago
ColonelClustered preview

ColonelClustered

GitHubhoodoer/colonelclustered

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…

fuzzingmachine-learningpenetration-testing+5
121 month ago
FlowName preview

FlowName

GitHub123wwwa/flowname

Next-generation JavaScript identifier recovery with LLMs.

ai-assisted-reversingai-securitycode-analysis+3
910 days ago
scan preview

scan

GitHubatomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

binary-analysiscode-analysisdefensive-tools+9
2231 day ago
deleting-the-trace preview

deleting-the-trace

GitHubusama1002/deleting-the-trace

Experiments for control-token chain-of-thought suppression and parser-leniency attacks on tool-using LLM agents

adversarial-attackai-securityexploitation+3
11 month ago
CVE-2024-37054 preview

CVE-2024-37054

GitHubbardlaudian/cve-2024-37054

Proof-of-concept that poisons MLflow registered models via the REST API, embedding a malicious pickle to trigger RCE when the model is loaded.

ai-securitydefensive-toolsexploitation+6
1 month ago
CVE-2024-37054-PoC preview

CVE-2024-37054-PoC

GitHubclearlotus-git/cve-2024-37054-poc

Proof-of-concept and research repository for CVE-2024-37054, an unsafe deserialization flaw in MLflow PyFunc model loading that can lead to remote…

ai-securitydefensive-toolseducation+4
1 month ago
modelscan preview

modelscan

GitHubprotectai/modelscan

Protection against Model Serialization Attacks

adversarial-attackai-securitydefensive-tools+5
7938 months ago
rats-re preview

rats-re

GitHubneuromancer/rats-re

Reconstructs legacy Windows binaries into C source by pairing Ghidra decompiler exports with local LLMs, producing compile-checked candidates and…

ai-assisted-reversingbinary-analysismachine-learning+1
22 months ago
CodeCut preview

CodeCut

GitHubjhuapl/codecut

A Ghidra plugin for locating object file boundaries.

binary-analysismachine-learningreverse-engineering+1
1329 months ago
resym preview

resym

GitHublt-asset/resym

For our CCS24 paper 🏆 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" by Danning Xie, Zhuo Zhang, Nan…

ai-assisted-reversingbinary-analysismachine-learning+2
1391 year ago
Awesome-LLMs-for-Vulnerability-Detection preview

Awesome-LLMs-for-Vulnerability-Detection

GitHubhuhusmang/awesome-llms-for-vulnerability-detection

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…

ai-securitycode-analysiscurated-resources+4
1.5k17h 54m ago
BrokenHill preview

BrokenHill

GitHubbishopfox/brokenhill

A productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)

adversarial-attackai-securityexploitation+2
1771 year ago
PoisonCraft preview

PoisonCraft

GitHubandyshaw01/poisoncraft

This repository provides the official implementation of POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models.

adversarial-attackai-securityexploitation+3
111 year ago
PISmith preview

PISmith

GitHubalbert-y1n/pismith

PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses

adversarial-attackai-securitymachine-learning+3
381 month ago
delirium-ai-safety-benchmark preview

delirium-ai-safety-benchmark

GitLabtoxy4ny/delirium-ai-safety-benchmark

A diagnostic framework for measuring LLM vulnerability to Affective Contextual Erosion (ACE) and related liminal attack vectors. **Delirium** is not…

adversarial-attackai-securityeducation+2
13 months ago
DeepGuard preview

DeepGuard

GitHubunknownhl/deepguard

Code for ACL 2026 (main) paper "DeepGuard: Secure Code Generation via Multi-Layer Semantic Aggregation"

ai-securitycode-analysiseducation+5
26 months ago
isa_recovery preview

isa_recovery

GitHubinfobyte/isa_recovery

ISA Recovery

ai-assisted-reversingbinary-analysiseducation+5
35 months ago
Previous1234Next