Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

419 results

sparrow-wifi

ghostop14/sparrow-wifi

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

bluetooth-securityinformation-gatheringlog-analysis+5

1.6k

1 month ago

PFQ

pfq/pfq

Functional Network Framework for Multi-Core Architectures

network-mappingnetwork-securitypacket-sniffing-analysis+1

5197 years ago

BlueDoor

sethwhy/bluedoor

Can you exploit the EternalBlue vulnerability (CVE-2017-0144) on a Windows 7 system and retrieve the hidden flag? Your goal is to gain administrative…

ctfeducationexploitation+7

21 year ago

CVE-2026-42945-NGINX-Rift-Toolkit

gagaltotal/cve-2026-42945-nginx-rift-toolkit

Automated toolkit for scanning, exploiting, and patching CVE-2026-42945 (critical RCE in nginx). Includes network scanner, heap spray exploit, and…

configuration-auditingexploitationnetwork-mapping+3

43 months ago

holo

holo-routing/holo

Rust-based routing protocol suite implementing BGP, OSPF, IS-IS, RIP, and VRRP with YANG-modeled configuration, gNMI/gRPC automation, and built-in…

configuration-auditingdns-analysisfuzzing+2

54120h 34m ago

ssh-audit

jtesta/ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

configuration-auditingcryptographyinformation-gathering+6

4.3k1 month ago

ShareHound

p0dalirius/sharehound

A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily

configuration-auditinginformation-gatheringnetwork-mapping+5

3137 days ago

ehids-agent

gojue/ehids-agent

A Linux Host-based Intrusion Detection System based on eBPF.

container-escapedefensive-toolsdns-analysis+5

4572 years ago

awesome-industrial-control-system-security

hslatman/awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

curated-resourcesexploitationfuzzing+9

2.0k11 months ago

emp3r0r

jm33-m0/emp3r0r

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

anti-botcommand-and-controlids-ips-evasion+10

1.7k4h 54m ago

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution

eesshq/cve-2017-0144---etneralblue-ms17-010-remote-code-execution

Step-by-step guide to exploiting MS17-010 EternalBlue vulnerability on Windows Server 2008 R2, including reconnaissance, exploitation,…

educationexploitationlabs-practice+8

185 years ago

OnionHop

center2055/onionhop

Privacy-first Desktop app that routes your traffic through Tor - Anonymous browsing made simple

dns-analysisnetwork-mappingnetwork-security+3

67412 days ago

procinfo

wenekar/procinfo

Get process information straight from bash, minimal dependencies.

container-securitygeneral-purpose-utilitiesinformation-gathering+3

302 months ago

netbox

netbox-community/netbox

Open-source IPAM and DCIM platform providing a centralized source of truth for modeling, documenting, and automating network infrastructure with…

configuration-auditinggeneral-purpose-utilitiesnetwork-access-control+2

21.5k2 days ago

NetAlertX

netalertx/netalertx

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

configuration-auditingdevsecopsincident-response+6

7.1k17 hours ago

ElectricEye

jonrau1/electriceye

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

cloud-securityconfiguration-auditingdevsecops+5

1.0k1 year ago

SecurityManageFramwork

we1h0/securitymanageframwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management,…

configuration-auditingnetwork-mappingpassword-cracking+4

4316 years ago

ipmi

zenfish/ipmi

IPMI stuff from DARPA work

authenticationconfiguration-auditinghardware-security+7

7614 days ago

Previous12…24 Next