Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

49 results

red-detector

lightspin-tech/red-detector

Automated vulnerability, misconfiguration, and rootkit scanner for AWS EC2 instances using Vuls, Lynis, and Chkrootkit via snapshot-based offline…

cloud-securitymalware-analysismisconfiguration+1

4 years ago

cve-2024-3094-tools

jfrog/cve-2024-3094-tools

Shell-based scanner to detect the XZ Backdoor (CVE-2024-3094) vulnerability in files and directories, enabling rapid identification and mitigation of…

forensicsincident-responsemalware-analysis+3

452 years ago

REx-skill

tihanyin/rex-skill

REx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery

ai-assisted-reversingbinary-analysisbinary-exploitation+8

1211 month ago

AutoPiff

splintersfury/autopiff

Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability…

binary-analysisexploitationfirmware-analysis+4

648 months ago

PESTO

elevenpaths/pesto

Extracts and analyzes PE file security characteristics (ASLR, DEP, CFG, NO_SEH) from DLLs and EXEs across directories, storing results in a SQLite…

binary-analysismalware-analysisstatic-analysis+1

266 years ago

skills

trailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

ai-assisted-reversingcode-analysiscurated-resources+8

6.5k3 days ago

HTTP-Basma

netomize/http-basma

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

command-and-controlinformation-gatheringmalware-analysis+6

3 months ago

r2ai

radareorg/r2ai

Radare2 AI plugin using local or remote LLMs for decompilation, function explanation, vulnerability detection, renaming, and scripted reverse…

ai-assisted-reversingbinary-analysiscode-analysis+5

4906 days ago

IRFuzz

oxiqa/irfuzz

YARA-based file scanner that monitors directories, detects malware in document archives, and outputs CSV results for SIEM integration.

malware-analysisvulnerability-scanners

256 years ago

CVE-2026-0596-Reproduction

sparshbiswas-ai/cve-2026-0596-reproduction

Research environment and validation scripts for evaluating deserialization behaviors in MLflow and MLServer.

binary-exploitationeducationexploitation+7

5 months ago

CVE-2022-30190

gyaansastra/cve-2022-30190

Comprehensive analysis of CVE-2022-30190 (Follina MSDT vulnerability) with IOCs, detection rules for SIEMs/EDR, YARA signatures, mitigation scripts,…

educationexploitationforensics+5

24 years ago

kraken

botherder/kraken

Cross-platform Yara scanner written in Go

forensicsincident-responsemalware-analysis+1

3273 years ago

bindiff

google/bindiff

Quickly find differences and similarities in disassembled code

binary-analysiseducationfirmware-analysis+5

3.1k1 month ago

WhatsAppHACK-RCE

kal1gh0st/whatsapphack-rce

Exploit for CVE-2019-11932, a remote code execution vulnerability in WhatsApp via malicious GIF files. Includes proof-of-concept code and technical…

exploitationmalware-analysismobile-security+2

274 years ago

Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection

garethmsheldon/fortinet-fortiweb-fabric-connector-cve-2025-25257-detection

This repository provides production-ready detection engineering content for **CVE-2025-25257**, a pre-authentication SQL Injection vulnerability in…

educationexploitationforensics+8

8 months ago

CVE-2024-3094

dah4k/cve-2024-3094

Proof-of-concept and analysis tools for CVE-2024-3094, the XZ Utils backdoor vulnerability, including detection and exploitation scripts.

binary-analysisexploitationmalware-analysis+2

2 years ago

lab_xz_backdoor

stevehenderson/lab_xz_backdoor

Some labs looking at the xz backdoor vulnerability (CVE-2024-3094)

educationexploitationforensics+6

14 months ago

wazuh

wazuh/wazuh

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

anomaly-detectionanti-botcloud-security+12

16.5k3 days ago

Previous12 3 Next