Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

34 results

puppet-os-hardening

dev-sec/puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

authenticationcloud-infrastructure-securityconfiguration-auditing+3

291

11 days ago

puppet-ssh-hardening

dev-sec/puppet-ssh-hardening

This puppet module provides secure ssh-client and ssh-server configurations.

authenticationcloud-infrastructure-securityconfiguration-auditing+2

602 years ago

WSUSResponder

radzarr/wsusresponder

Module PowerShell de réponse à l'incident CVE-2025-59287 — WSUS Remote Code Execution (RCE)

cloud-infrastructure-securityconfiguration-auditingincident-response+2

11 months ago

CVE-2026-43284-CVE-2026-43500-scan

gagaltotal/cve-2026-43284-cve-2026-43500-scan

Automated SSH-based scanner and patcher for Linux kernel LPE vulnerabilities CVE-2026-43284 and CVE-2026-43500, with multi-host discovery, privilege…

configuration-auditingexploitationincident-response+3

14 months ago

OVSwrap-CVE-2026-64531-Mitigation-Tool

mahfuzreham/ovswrap-cve-2026-64531-mitigation-tool

Shell script that detects vulnerable Open vSwitch kernel modules, blocks automatic loading, removes the affected module, and verifies mitigation…

configuration-auditingdefensive-toolsnetwork-security+1

21 month ago

BadSamba

strozfriedberg/badsamba

This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB share.

exploitationlateral-movementnetwork-security+3

226 years ago

yamcs__yamcs_CVE-2023-45277_5-8-6

shoucheng3/yamcs__yamcs_cve-2023-45277_5-8-6

Java-based mission control framework with YAML configuration, supporting telemetry, commanding, and simulation for spacecraft operations. Includes…

configuration-auditingexploitationnetwork-security+3

1 year ago

EvilSunCheck

frompartsunknown/evilsuncheck

This is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in…

authenticationexploitationnetwork-security+2

1 year ago

Detection-and-Mitigation-for-CVE-2022-2639

ekamsinghwalia/detection-and-mitigation-for-cve-2022-2639

Shell script to detect and mitigate CVE-2022-2639 in Open vSwitch kernel module. Checks module status, provides remediation steps, and recommends…

educationexploitationmisconfiguration+3

3 years ago

detect_bluekeep.py

hynekpetrak/detect_bluekeep.py

Python script to detect bluekeep vulnerability (CVE-2019-0708) with TLS/SSL and x509 support

exploitationnetwork-securitypenetration-testing+3

277 years ago

CVE-2026-42530

v4ltonn/cve-2026-42530

Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)

exploitationfuzzingnetwork-security+2

53 months ago

CVE-2025-26466-msf

mrowkoob/cve-2025-26466-msf

CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework

educationexploit-frameworksnetwork-security+2

1 year ago

Bluekeep-Hunter

ravaan21/bluekeep-hunter

CVE-2019-0708, A tool which mass hunts for bluekeep vulnerability for exploitation.

exploitationexploit-frameworksnetwork-security+3

43 years ago

cve-2019-11477-poc

sasqwatch/cve-2019-11477-poc

Proof-of-concept exploit for CVE-2019-11477, demonstrating a denial-of-service attack against Linux kernel TCP SACK panic via crafted netfilter…

exploitationnetwork-securitypenetration-testing+2

87 years ago

PasswordsSniffer

mauricelambert/passwordssniffer

This module sniff username and password of unprotected protocols.

information-gatheringnetwork-securitypacket-sniffing-analysis+2

95 years ago

ParrotSec-Linux-Hardening-Project

xe1phix/parrotlinux-public-kiosk-project

Systematic Linux kernel hardening project implementing KSPP-recommended settings, module blacklisting, and restricted environment configuration for…

configuration-auditingdigital-forensicsforensics+3

31 month ago

CVE-2020-0796

julixsalas/cve-2020-0796

Metasploit Auxiliary module for scanning and detecting CVE-2020-0796 (SMBGhost) vulnerability in Windows SMBv3 implementations.

exploitationexploit-frameworksnetwork-security+3

14 years ago

nginx-rift-detect

iammerrida-source/nginx-rift-detect

Behavioral detection script for CVE-2026-42945 (NGINX Rift) — heap overflow in ngx_http_rewrite_module. No RCE, crash-based detection only.

exploitationinformation-gatheringnetwork-security+3

44 months ago

Previous12 Next