Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
37 results
aws-doctor preview

aws-doctor

GitHubelc0mpa/aws-doctor

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
429
20h 16m ago
CVE-2024-40275_Scanner preview

CVE-2024-40275_Scanner

GitHubburjoy/cve-2024-40275_scanner

Scanner for CVE-2024-40725 Apache HTTP Server source-code disclosure; probes direct and subrequest paths, fingerprints affected versions, and outputs…

misconfigurationvulnerability-analysisvulnerability-scanners+2
3 days ago
Sighthound preview

Sighthound

GitHubcorgea/sighthound

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…

code-analysisdevsecopsmisconfiguration+4
2759 days ago
tlsx preview

tlsx

GitHubprojectdiscovery/tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

dns-subdomain-enumerationinformation-gatheringmisconfiguration+2
1.1k18 days ago
CVE-2026-42533-nginx preview

CVE-2026-42533-nginx

GitHubgagaltotal/cve-2026-42533-nginx

CVE-2026-42533 Nginx

code-analysisconfiguration-auditingmisconfiguration+3
28 days ago
terraform-aws-secure-baseline preview

terraform-aws-secure-baseline

GitHubnozaq/terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
1.2k1 month ago
s3-bucket-take-0v3r preview

s3-bucket-take-0v3r

GitHubjenderal92/s3-bucket-take-0v3r

AWS AMAZON S3 Bucket Takeover Scanner & Claim Tool

cloud-securityconfiguration-auditinginformation-gathering+4
12 months ago
CVE-2025-34291_cors_security_scanner preview

CVE-2025-34291_cors_security_scanner

GitHubamnnrth/cve-2025-34291_cors_security_scanner

A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing (CORS) misconfigurations - CVE-2025-34291.

api-security-testingmisconfigurationpenetration-testing+3
3 months ago
argus-wp-watcher preview

argus-wp-watcher

GitHubrodhnin/argus-wp-watcher

WordPress security scanner with AI-powered analysis, ethical compliance framework, and professional reporting.

ai-securitycrawlereducation+5
183 months ago
dns-zone-audit preview

dns-zone-audit

GitHubsleepthegod/dns-zone-audit

This Bash script checks domains for DNS zone transfer misconfigurations (CVE-1999-0532). It queries name servers and attempts AXFR requests; if…

dns-analysisinformation-gatheringmisconfiguration+3
14 months ago
aws-perimeter preview

aws-perimeter

GitHubthirukguru/aws-perimeter

A terminal-based AWS Security Scanner with 102+ security checks across VPC, IAM, S3, CloudTrail, containers (ECS/EKS), and AI attack detection.…

ai-securitycloud-infrastructure-securitycloud-security+9
36 months ago
reposherlock preview

reposherlock

GitHubkemal-arslan/reposherlock

Analyze any GitHub repo (URL or local path) → architecture map, verified run commands, risks, and actionable issues - in minutes.

code-analysisdevsecopsmisconfiguration+4
26 months ago
CVE-2025-67160 preview

CVE-2025-67160

GitHubremenis/cve-2025-67160

Vatilon-based IP cameras expose internal web directories without authentication, leading to information disclosure.

exploitationinformation-gatheringiot-security+3
7 months ago
CVE-2025-55182-scanner preview

CVE-2025-55182-scanner

GitHubyaupunal/cve-2025-55182-scanner

CVE-2025-55182-scanner with 2 different method

defensive-toolsids-ips-evasionmisconfiguration+3
8 months ago
CVE-2025-12720 preview

CVE-2025-12720

GitHubd0n601/cve-2025-12720

g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion

api-security-testingauthenticationexploitation+3
9 months ago
electronegativity preview

electronegativity

GitHubdoyensec/electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

code-analysismisconfigurationstatic-analysis+1
1.1k0 years ago
payara__Payara_CVE-2022-37422_5-2022-2 preview

payara__Payara_CVE-2022-37422_5-2022-2

GitHubshoucheng3/payara__payara_cve-2022-37422_5-2022-2
cloud-securitycontainer-securitydevsecops+3
1 year ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubaxisops/cve-2021-44228

log4j mitigation work

configuration-auditingdevsecopsmisconfiguration+3
1 year ago
Previous123Next