Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

483 results

plex2scan

akaihigurashi/plex2scan

Find Plex Media Servers affected by Plex2Shell (CVE-2026-96652 and three more)

defensive-toolsdns-subdomain-enumerationinformation-gathering+5

8 days ago

cve-2026-98432-check

marcelofmatos/cve-2026-98432-check

Verifica se um host descarta SYN TCP IPv4 com IP options (mitigação do CVE-2026-98432)

configuration-auditingdefensive-toolsmisconfiguration+5

2 days ago

Probe-CVE-2026-98432

bitwire-it/probe-cve-2026-98432

Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP…

defensive-toolsinformation-gatheringnetwork-mapping+6

25 days ago

omnicheck_CVE-2026-98432

omniversetr/omnicheck_cve-2026-98432

Non-destructive checker for CVE-2026-98432 (Linux kernel TCP use-after-free): patch status, exposed listeners and mitigation verification. By…

configuration-auditingdefensive-toolsnetwork-mapping+5

11 day ago

kernel98scan

akaihigurashi/kernel98scan

Is your Linux host exposed to CVE-2026-98432?

configuration-auditingdefensive-toolsinformation-gathering+6

2 days ago

CVE-2026-88629-fastgpt-mcp-client-ssrf

exploreio/cve-2026-88629-fastgpt-mcp-client-ssrf

Python PoC and exploitation script for CVE-2026-88629, an unauthenticated SSRF in FastGPT MCP client getTools/runTool endpoints, with intranet port…

network-mappingpenetration-testingreconnaissance+2

11 month ago

ARTEX

baarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9

85510 days ago

kitsune

bitplugg/kitsune

🦊 nine-tailed pentest framework — nmap + msf + aircrack + sqlmap в одном CLI · 25 модулей · SQLite-сессия · TUI · REST API · pipx install

exploit-frameworksnetwork-mappingpassword-attacks+8

26 days ago

Awesome-Asset-Discovery

redhuntlabs/awesome-asset-discovery

Curated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…

cloud-securitycurated-resourcesemail-harvesting+7

2.9k1 year ago

UA3F

sunbk201/ua3f

Transparent HTTP(S) rewriting proxy supporting HTTP, SOCKS5, TPROXY, REDIRECT and NFQUEUE modes with HTTPS MitM, rule-based header/body rewriting and…

anti-botnetwork-mappingnetwork-security+5

69629 days ago

passer

activecm/passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

defensive-toolsdns-analysisfingerprint-spoofing+6

2688 months ago

inventory

trickest/inventory

Automated attack surface inventory for 800+ public bug bounty programs, running scheduled subdomain enumeration, permutation, DNS and web server…

curated-resourcesdns-subdomain-enumerationinformation-gathering+6

1.6k1 year ago

CVE-2026-86426

guila95/cve-2026-86426

Proof-of-concept and recon framework for CVE-2026-86426, a LibreNMS API authentication bypass via type confusion, extracting SNMP credentials and…

exploitationinformation-gatheringnetwork-mapping+3

10 days ago

TorBot

dedsecinside/torbot

Crawls .onion sites over Tor to collect page titles, hostnames, and link relationships, exporting JSON trees and visualizations for dark web OSINT…

crawlerinformation-gatheringnetwork-mapping+5

5.2k7 days ago

p2pwn

thebadinteger/p2pwn

Dahua cameras security scanner via P2P

exploitationhardware-iot-securityinformation-gathering+6

666 days ago

Project-Tauro

k0r0pt/project-tauro

A Router WiFi key recovery/cracking tool with a twist.

information-gatheringnetwork-mappingpassword-attacks+5

948 years ago

LBFH

naimkowshik/lbfh

About All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

educationexploitationhash-analysis+9

725 years ago

v1ew-s0urce

cro-thehacker/v1ew-s0urce

Python-based penetration testing framework and reconnaissance toolkit offering port scanning, information gathering, and network scanning modules for…

information-gatheringnetwork-mappingpenetration-testing+5

915 years ago

Previous12…27 Next