Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
283 results
network-attack-simulator preview

network-attack-simulator

GitHublhiebert01/network-attack-simulator

Streamlit educational dashboard that simulates port scanning, DoS, brute force and data exfiltration attacks, with visualizations, attack logs and…

educationlabs-practicelog-analysis+2
1 year ago
Internal-Network-Penetration-testing preview

Internal-Network-Penetration-testing

GitHubaniket2912/internal-network-penetration-testing

Educational module on internal network penetration testing: methodology, attack vectors, enumeration, exploitation, privilege escalation, and…

educationlabs-practicelateral-movement+9
11 year ago
dhcpflood preview

dhcpflood

GitHubamirsafiallah/dhcpflood

C++ tool using libtins to craft and broadcast DHCP requests with random MACs across an IP pool, exhausting DHCP leases to demonstrate DHCP starvation…

adversarial-attackeducationnetwork-security+3
18 years ago
Evil_Twin_Attack preview

Evil_Twin_Attack

GitLabyashubitra/evil_twin_attack

Rogue access point attack and defense on Kali Linux: deauth with aireplay-ng, an airbase-ng evil twin with a captive portal, plus real-time…

educationintrusion-detectionnetwork-security+5
1 year ago
CVE-2026-110912 preview

CVE-2026-110912

GitHub0xblackash/cve-2026-110912

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

defensive-toolseducationexploitation+5
213 days ago
MCP-God-Mode preview

MCP-God-Mode

GitHubgmh5225/mcp-god-mode

Did you ever just want it to do everything? 148 POWERFUL Infosec/Admin tools on a single MCP server.

command-and-controlhardware-iot-securityinformation-gathering+9
11 year ago
HomeLab preview

HomeLab

GitHubko0ler/homelab

GNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…

educationlabs-practicenetwork-mapping+5
115 days ago
cve-2026-19553-wrap-bio preview

cve-2026-19553-wrap-bio

GitHubabraxas/cve-2026-19553-wrap-bio

Proof-of-concept lab reproducing CVE-2026-19553, where CPython ssl.SSLContext.wrap_bio() silently skips TLS hostname verification when…

cryptographyeducationexploitation+4
14h 7m ago
InfraPulse-Core preview

InfraPulse-Core

GitHubvighnesh91/infrapulse-core

A high-fidelity, read-only internal network security assessment toolkit for Linux and Windows infrastructure. Employs a zero-mutation, default-deny…

configuration-auditingdefensive-toolsinformation-gathering+5
226 days ago
pcybox-attackgraph preview

pcybox-attackgraph

GitHubmister-iks/pcybox-attackgraph

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

ctfdefensive-toolseducation+5
471 month ago
CVE-2026-mikrotik-poc preview

CVE-2026-mikrotik-poc

GitHubgagaltotal/cve-2026-mikrotik-poc

MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH

authenticationeducationembedded-systems-security+5
620 days ago
CVE-2026-68121 preview

CVE-2026-68121

GitHubhorkimhab/cve-2026-68121

Proof-of-concept for CVE-2026-68121 (PPPoEject), providing a Python exploit implementation for authorized security research and lab testing.

educationexploitationlabs-practice+4
1 month ago
ZX-DDoS preview

ZX-DDoS

GitHubmrgoofydev/zx-ddos

Python-based DDoS stress testing tool for educational and authorized network security evaluation, supporting configurable workers and request counts.

educationgeneral-purpose-utilitiesnetwork-security+3
561 month ago
cve-2024-36401-security-simulator preview

cve-2024-36401-security-simulator

GitHubraniaemran/cve-2024-36401-security-simulator

Educational Python simulator modeling a fictional security incident inspired by CVE-2024-36401 to demonstrate vulnerability management, segmentation,…

defensive-toolseducationincident-response+5
1 month ago
heartbleed-vulnerability-exploitation preview

heartbleed-vulnerability-exploitation

GitHubl1lf1ng3r/heartbleed-vulnerability-exploitation

hands on investigation of the heartbleed vulnerability (CVE-2014-0160).

cryptographyeducationexploitation+7
1 month ago
sunset-noontide-pentesting preview

sunset-noontide-pentesting

GitHubzales2004/sunset-noontide-pentesting

Description Professional penetration testing assessment of the Sunset: Noontide VulnHub machine, covering reconnaissance, service enumeration,…

ctfeducationexploitation+9
13h 18m ago
CyberSecurity-Pentest-Lab preview

CyberSecurity-Pentest-Lab

GitHubgermarr93/cybersecurity-pentest-lab

CVE-2004-2687 (Distcc 3.2.1) exploitation, methodology & remediation — Metasploitable2 lab

ctfeducationexploitation+6
120 days ago
intra-handshake-fail preview

intra-handshake-fail

GitHubmuhammad-usama-sardar/intra-handshake-fail

IETF Internet-Draft analyzing early attestation risks in attested TLS handshakes, documenting CVE-2026-33697 and proposing protocol mitigations for…

authenticationcryptographyeducation+3
42 days ago
Previous12…16Next