Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

376 results

rdpscan-BlueKeep

gh0st0ne/rdpscan-bluekeep

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

exploitationinformation-gatheringnetwork-security+3

7 years ago

CVE-2019-0708-scan

lisinan988/cve-2019-0708-scan

Batch scanner for CVE-2019-0708 (BlueKeep) RDP vulnerability with Windows and Linux support, using rdpscan and custom Cscan for mass IP range…

exploitationinformation-gatheringnetwork-security+3

4 years ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

30.4k12h 55m ago

Zero-day-scanning

anonymous-family/zero-day-scanning

Zero-day-scanning is a Domain Controller vulnerability scanner, that currently includes checks for Zero-day-scanning (CVE-2020-1472), MS-PAR/MS-RPRN…

exploitationnetwork-securitypenetration-testing+2

14 years ago

dirtycups

jimi2x/dirtycups

UDP-based scanner for CVE-2024-47176 that validates CUPS vulnerability by creating a local socket listener and triggering target responses.

exploitationnetwork-securitypenetration-testing+2

5 months ago

CVE-2026-24061-telnet2root

furkankayapinar/cve-2026-24061-telnet2root

Scanner and interactive exploit for CVE-2026-24061 in inetutils-telnetd, enabling pre-auth root access via crafted NEW-ENVIRON negotiation. Includes…

exploitationlabs-practicenetwork-security+3

19 months ago

BlueKeep

oneoy/bluekeep

CVE-2019-0708 bluekeep 漏洞检测

exploitationinformation-gatheringnetwork-security+3

7 years ago

tomcat-cve-2020-1938-check

fatal0/tomcat-cve-2020-1938-check

Go-based scanner for Apache Tomcat AJP file read/inclusion vulnerability (CVE-2020-1938). Detects and exploits Ghostcat to read arbitrary files or…

exploitationnetwork-securityvulnerability-scanners+1

76 years ago

CVE-2026-35517

keraattin/cve-2026-35517

Detection scripts for Pi-hole FTLDNS RCE (CVE-2026-35517) via newline injection, including Python scanner and Nmap NSE script for version-based…

exploitationinformation-gatheringnetwork-security+3

6 months ago

checker-CVE-2024-6387

achux21/checker-cve-2024-6387

Python scanner that checks hosts for the OpenSSH regreSSHion vulnerability (CVE-2024-6387)

exploitationnetwork-securitypenetration-testing+3

22 years ago

cve-2023-36845-scanner

vulncheck-oss/cve-2023-36845-scanner

A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845

exploitationnetwork-securitypenetration-testing+3

621 year ago

CVE-2023-20198-IOS-XE-Scanner

mr-r3b00t/cve-2023-20198-ios-xe-scanner

Single-threaded PowerShell PoC scanner for CVE-2023-20198 targeting Cisco IOS XE devices. Quick proof-of-concept for vulnerability detection and…

exploitationnetwork-securitypenetration-testing+2

23 years ago

MS09-050

bytejmp/ms09-050

Python exploit for MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow, with vulnerability scanner, arch auto-detection, and x86/x64 reverse…

exploitationinformation-gatheringnetwork-security+7

1 month ago

tscan

cumakurt/tscan

Python-based scanner that detects and exploits CVE-2026-24061 telnetd authentication bypass, enabling root shell access on vulnerable GNU Inetutils…

educationexploitationnetwork-security+4

29 months ago

rtpnatscan

kapejod/rtpnatscan

Minimal CLI scanner that probes RTP proxies and NAT helpers for NAT-stealing vulnerability, helping VoIP administrators validate and harden media…

network-securitypenetration-testingvulnerability-analysis+1

259 years ago

Nettacker

owasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

api-securityapi-security-testingdynamic-code-analysis+14

5.5k21h 55m ago

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

mr-whiskerss/ssh-terrapin-prefix-truncation-weakness-cve-2023-48795-checker

Lightweight Python scanner for CVE-2023-48795 (SSH Terrapin prefix truncation). Performs passive banner grab and KEXINIT parse to detect vulnerable…

exploitationinformation-gatheringnetwork-security+3

14 months ago

cve-2019-1040-scanner

fox-it/cve-2019-1040-scanner

SMB vulnerability scanner that detects CVE-2019-1040 by sending invalid NTLM authentication packets, enabling MIC Remove relay attacks for domain…

authenticationexploitationnetwork-security+2

3006 years ago

Previous 123…21 Next