Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
35 results
slipstream preview

slipstream

GitHubsamyk/slipstream

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by…

exploitationnetwork-securitypenetration-testing+2
2.0k
3 years ago
TLS-Attacker preview

TLS-Attacker

GitHubtls-attacker/tls-attacker

Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

cryptographyfuzzingnetwork-security+2
87927 days ago
Portspoof preview

Portspoof

GitHubdrk1wi/portspoof

Emulates open ports and service signatures across all 65535 TCP ports to slow reconnaissance, confuse scanners, and waste attacker resources with…

defensive-toolsids-ips-evasionnetwork-security+3
2.4k6 days ago
SMBetray preview

SMBetray

GitHubquickbreach/smbetray

SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in…

exploitationnetwork-securityred-teaming
3818 years ago
CVE-2020-16898 preview

CVE-2020-16898

GitHubadvanced-threat-research/cve-2020-16898

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

exploitationintrusion-detectionnetwork-security+1
2095 years ago
CVE-2018-0296 preview

CVE-2018-0296

GitHubyassineaboukir/cve-2018-0296

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

exploitationinformation-gatheringnetwork-security+3
2052 years ago
shARP preview

shARP

GitHubeuropa502/sharp

An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.

defensive-toolsids-ips-evasionnetwork-security+1
1728 years ago
log4j-honeypot-flask preview

log4j-honeypot-flask

GitHubbinarydefense/log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

defensive-toolsintrusion-detectionnetwork-security+2
1494 years ago
APOLOGEE preview
Archived

APOLOGEE

GitHubrosesecurity/apologee

APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers (all…

authenticationexploitationexploit-frameworks+8
501 year ago
AIP preview

AIP

GitHubstratosphereips/aip

The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.

information-gatheringintrusion-detectioniot-security+3
321 year ago
sipcheck preview

sipcheck

GitHubsinologicnet/sipcheck

Monitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…

authenticationdefensive-toolsids-ips-evasion+2
256 years ago
Absolutely-Positively-NOT-Hacking-Back-with-Pcap preview

Absolutely-Positively-NOT-Hacking-Back-with-Pcap

GitHubstvemillertime/absolutely-positively-not-hacking-back-with-pcap

Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control Nodes

command-and-controlexploitationids-ips-evasion+3
227 years ago
CVE-2020-16899 preview

CVE-2020-16899

GitHubadvanced-threat-research/cve-2020-16899

CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

dns-analysisids-ips-evasionintrusion-detection+3
205 years ago
CVE-2018-15473 preview

CVE-2018-15473

GitHubr3dxpl0it/cve-2018-15473

OpenSSH 7.7 - Username Enumeration

exploitationinformation-gatheringnetwork-security+3
175 years ago
CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC preview

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

GitHubomer-efe-curkus/cve-2025-32433-erlang-otp-ssh-rce-poc

The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication.

command-and-controlexploitationnetwork-security+3
161 year ago
CVE-2018-10933 preview

CVE-2018-10933

GitHubkn6869610/cve-2018-10933

Leveraging it is a simple matter of presenting the server with the SSH2_MSG_USERAUTH_SUCCESS message, which shows that the login already occurred…

authenticationexploitationnetwork-security+2
147 years ago
cve2018-13379-nmap-script preview

cve2018-13379-nmap-script

GitHubblazz3/cve2018-13379-nmap-script

CVE-2018-13379 Script for Nmap NSE.

exploitationinformation-gatheringnetwork-security+3
125 years ago
dlsw_exploit preview

dlsw_exploit

GitHubtt5555/dlsw_exploit

cisco dlsw exploit

exploitationinformation-gatheringnetwork-security+1
911 years ago
Previous12Next