Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1002 results
DDos_Attack.py preview

DDos_Attack.py

GitHubakashblackhat/ddos_attack.py

NetSTRIK is a powerful DDoS (Distributed Denial of Service) attack tool that simulates heavy traffic to test the robustness and security of servers,…

network-securitypenetration-testingweb-security
1711 year ago
POC-CVE-2026-49975 preview

POC-CVE-2026-49975

GitHubnaheeju/poc-cve-2026-49975

Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2

exploitationnetwork-securityvulnerability-analysis+1
318 days ago
nginx-ultimate-bad-bot-blocker preview

nginx-ultimate-bad-bot-blocker

GitHubmitchellkrogza/nginx-ultimate-bad-bot-blocker

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS,…

anti-botdefensive-toolsnetwork-security+1
4.8k12h 59m ago
doser.go preview

doser.go

GitHubquitten/doser.go

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

network-securitypenetration-testingred-teaming+1
5393 years ago
HASH preview

HASH

GitHubdatadog/hash

YAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…

defensive-toolsnetwork-securitythreat-intelligence+1
14219 days ago
HSTP preview

HSTP

GitHubcagataycali/hstp

Application-layer protocol framework for trust-based, end-to-end encrypted communication across heterogeneous networks, enabling uniform service…

cryptographynetwork-securityutilities-frameworks+1
1552 years ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubpolakow/cve-2022-21907

A REAL DoS exploit for CVE-2022-21907

exploitationnetwork-securityvulnerability-analysis+1
1284 years ago
Pummel preview

Pummel

GitHubhc133/pummel

Socks5 Proxy HTTP/HTTPS-Flooding (cc) Test

network-securitypenetration-testingweb-security
1081 year ago
log-add-http-post-bodies preview

log-add-http-post-bodies

GitHubcorelight/log-add-http-post-bodies

Add POST body excerpt to Bro's HTTP log

digital-forensicslog-analysisnetwork-security+1
149 months ago
CVE-2026-42530 preview

CVE-2026-42530

GitHubv4ltonn/cve-2026-42530

Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)

exploitationfuzzingnetwork-security+2
53 months ago
bro-shellshock preview

bro-shellshock

GitHubcorelight/bro-shellshock

ShellShock attack and exploit detector for Bro.

intrusion-detectionnetwork-securityvulnerability-analysis+1
28 years ago
CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS preview

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

GitHubgeorge0papasotiriou/cve-2026-11118-http-2-rapid-reset-ddos

Python PoC for CVE-2026-11118 demonstrating HTTP/2 Rapid Reset DDoS via RST_STREAM resource exhaustion; includes vulnerable server simulator and…

exploitationnetwork-securityvulnerability-analysis+1
2 months ago
CVE-2022-21907-http.sys preview

CVE-2022-21907-http.sys

GitHubsiboy17/cve-2022-21907-http.sys

Proof-of-concept exploit for CVE-2022-21907, a critical remote code execution vulnerability in the Windows HTTP.sys stack, targeting vulnerable…

exploitationnetwork-securityvulnerability-analysis+1
2 months ago
CVE-2025-22870 preview

CVE-2025-22870

GitHubjoshuaprovoste/cve-2025-22870

Proof-of-concept for CVE-2025-22870 demonstrating HTTP proxy bypass in vulnerable versions (<0.36.0) of golang.org/x/net/http/httpproxy. Exploits…

exploitationnetwork-securityvulnerability-analysis+1
21 year ago
cpanel2shell-honeypot preview

cpanel2shell-honeypot

GitHubacuciureanu/cpanel2shell-honeypot

A Rust honeypot that simulates a vulnerable cPanel/WHM instance for CVE-2026-41940

network-securitythreat-intelligencevulnerability-analysis+1
4 months ago
apachedos preview

apachedos

GitHubjptr218/apachedos

An implementation of CVE-2016-8740

exploitationnetwork-securityvulnerability-analysis+1
15 years ago
purpleteam-tls-checker preview
Archived

purpleteam-tls-checker

GitLabpurpleteam-labs/purpleteam-tls-checker

TLS checking component of purpleteam

cloud-securitydevsecopsnetwork-security+2
15 years ago
cybersecurity-interview-questions preview

cybersecurity-interview-questions

GitHubexcalibra/cybersecurity-interview-questions

Curated collection of 200+ cybersecurity interview questions and answers covering Red Team, Blue Team, Web Security, Incident Response, and network…

curated-resourceseducationincident-response+4
132 months ago
Previous123…56Next