Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

44 results

nmap-CVE-2023-35078-Exploit

emanueldosreis/nmap-cve-2023-35078-exploit

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

exploitationnetwork-securitypenetration-testing+3

3 years ago

geoip-attack-map

matthewclarkmay/geoip-attack-map

Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.

information-gatheringnetwork-securitythreat-intelligence

3688 years ago

stegowiper

mindcrypt/stegowiper

A powerful and flexible tool to apply active attacks for disrupting stegomalware

defensive-toolsincident-responsemalware-analysis+2

564 years ago

CVE-2023-25136_POC

axylisdead/cve-2023-25136_poc

CVE-2023-25136 POC written by axylisdead

exploitationnetwork-securitypenetration-testing+2

33 years ago

CVE-2023-20198

revoltsecurities/cve-2023-20198

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

exploitationnetwork-securitypenetration-testing+3

72 years ago

shodan-eye

bullseye0/shodan-eye

Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter.…

information-gatheringnetwork-securityosint+2

1.4k27 days ago

Interview_Tips

jigerjain/interview_tips

Summary of Cyber Security interview questions I have been through, hope this helps

binary-exploitationcloud-securitycryptography+5

716 years ago

CVE-2019-6693

real4xor/cve-2019-6693

Decrypt FortiGate configuration files and encrypted strings to detect default encryption keys, enabling rapid assessment of CVE-2019-6693…

configuration-auditingencryption-decryption-toolsnetwork-security+2

11 year ago

DisableSMBCompression

technion/disablesmbcompression

CVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates

configuration-auditingincident-responsemisconfiguration+2

96 years ago

CVE-2016-6415-BenignCertain-Monitor

3ndg4me/cve-2016-6415-benigncertain-monitor

Re-implementation of VirtueSecurity's benigncertain-monitor

exploitationinformation-gatheringmemory-forensics+3

115 years ago

CVE-2026-8932

0xblackash/cve-2026-8932

CVE-2026-8932

authenticationcryptographyexploitation+3

12 months ago

CVE-2025-0108

becrevex/cve-2025-0108

NSE script that checks for CVE-2025-0108 vulnerability in Palo Alto Networks PAN-OS

exploitationnetwork-securitypenetration-testing+2

21 year ago

CVE-2018-10933

youkergav/cve-2018-10933

Authentication Bypass in Server Code for LibSSH

authenticationexploitationnetwork-security+2

6 years ago

CVE-2017-3881-Cisco

homjxi0e/cve-2017-3881-cisco

Proof-of-concept remote code execution exploit for CVE-2017-3881 affecting Cisco Catalyst switches with telnet enabled, including detailed exploit…

exploitationnetwork-securitypenetration-testing+3

9 years ago

CVE-2021-36630

lixiang957/cve-2021-36630

Proof-of-concept exploit for CVE-2021-36630 targeting Ruckus SmartZone wireless controllers via UDP command injection on port 9001.

exploitationnetwork-securitypenetration-testing+2

3 years ago

vuln-CVE-2022-41082

notareaperbutdr34p3r/vuln-cve-2022-41082

https & http

exploitationnetwork-securitypenetration-testing+3

3 years ago

Archived

Detections-CVE-2026-23918

insomnisec/detections-cve-2026-23918

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

exploitationids-ips-evasionincident-response+6

3 months ago

Network_Assessment

alperenugurlu/network_assessment

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

anomaly-detectionintrusion-detectionnetwork-security+2

1473 years ago

Previous 123 Next