Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
12 results
OpenShell preview

OpenShell

GitHubnvidia/openshell

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

ai-securityauthentication-authorizationcloud-security+7
20.4k
3h 38m ago
HTTP3-Adapter preview

HTTP3-Adapter

GitHubt0xodile-swig/http3-adapter

Burp Suite extension that intercepts requests and sends them over HTTP/3, converting responses back for Burp, with support for kettled requests and…

api-security-testingnetwork-securitypenetration-testing+3
61 month ago
CVE-2026-20127-Exploit-Extension preview

CVE-2026-20127-Exploit-Extension

GitHubanuththara2007-w/cve-2026-20127-exploit-extension

Offline browser extension providing defensive analysis and detection guidance for CVE-2026-20127, with packet visualization, IOC extraction, and…

curated-resourcesdefensive-toolseducation+6
3 months ago
CVE-2014-0160 preview

CVE-2014-0160

GitHub0xblackash/cve-2014-0160

CVE-2014-0160

cryptographyeducationexploitation+3
7 months ago
TED preview

TED

GitHubthuname/ted

Research artifact from USENIX Security 2026 demonstrating DDoS attacks by abusing tunnel nodes and IPv6 extension headers, with accompanying analysis…

adversarial-attackdns-analysisnetwork-security+1
28 months ago
Heartbleed-PoC-Exploit-Script preview

Heartbleed-PoC-Exploit-Script

GitHubindrajeetmp11/heartbleed-poc-exploit-script

This Python PoC script detects the Heartbleed vulnerability (CVE-2014-0160) by performing a TLS handshake with heartbeat extension and sending a…

cryptographyeducationexploitation+3
211 months ago
CVE-2025-24071_PoCExtra preview

CVE-2025-24071_PoCExtra

GitHubctabango/cve-2025-24071_pocextra

Proof-of-concept exploit for CVE-2025-24071 that creates a .searchconnector-ms file to trigger SMB authentication when copied, enabling credential…

exploitationinformation-gatheringlateral-movement+3
21 year ago
ecs_checker preview

ecs_checker

GitHubfurkankayapinar/ecs_checker

EDNS Client Subnet (ECS) Remote Detection Tool - CVE-2025-40766

dns-analysisinformation-gatheringnetwork-security+2
11 year ago
chaostoolkit-kubernetes preview

chaostoolkit-kubernetes

GitHubchaostoolkit/chaostoolkit-kubernetes

Kubernetes driver extension of the Chaos Toolkit probes and actions API

chaos-engineeringcloud-infrastructure-securitycontainer-security+1
1912 years ago
eero-zero-length-ipv6-options-header-dos preview

eero-zero-length-ipv6-options-header-dos

GitHubnomis/eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability (CVE-2023-5324)

exploitationfuzzinghardware-iot-security+3
13 years ago
Good-MITM preview

Good-MITM

GitHubzu1k/good-mitm

Rule-based MITM engine. Rewriting, redirecting and rejecting on HTTP(S) requests and responses, supports JavaScript rule.

network-securityprivacyscripting-automation+3
8583 years ago
behave preview

behave

GitHubmindedsecurity/behave

Behave! A monitoring browser extension for pages acting as "bad boi"

defensive-toolsdns-analysisnetwork-security+3
3466 years ago