Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

282 results

Pulsar

jacopodl/pulsar

Data exfiltration and covert communication tool

command-and-controlcryptographydata-exfiltration+2

403 years ago

CVE-2024-38063-Exploit-Refactoring

arrhenius975/cve-2024-38063-exploit-refactoring

Python-based exploit for CVE-2024-38063 targeting Windows IPv6 vulnerability. Automates network interface detection, packet crafting, and…

exploitationnetwork-securitypayload-generation+3

7 months ago

external_curl_AOSP10_r33_CVE-2021-22924

trinadh465/external_curl_aosp10_r33_cve-2021-22924

Command-line tool and library for transferring data using URL syntax, supporting various protocols including HTTP, FTP, and more.

general-purpose-utilitiesnetwork-securityscripting-automation+2

4 years ago

velociraptor

velocidex/velociraptor

Digging Deeper....

data-recoverydefensive-toolsdigital-forensics+8

4.3k1 day ago

packETH

jemcek/packeth

Ethernet packet generator

fuzzingnetwork-securitypacket-sniffing-analysis+1

1361 year ago

CVE-2014-0160

0x90/cve-2014-0160

Heartbleed variants

cryptographyeducationexploitation+6

812 years ago

phantomprint

haruu77g/phantomprint

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

digital-forensicsinformation-gatheringnetwork-mapping+7

41 month ago

cups-script-final-project

aniruddh-bhandarkar/cups-script-final-project

Custom script to showcase the novel contribution to CVE-2025-58060

authenticationnetwork-securitypenetration-testing+3

5 months ago

CVE-2025-8671-vulnerability-POC-

mysara2022/cve-2025-8671-vulnerability-poc-

CVE-2025-8671 vulnerability POC

exploitationnetwork-securitypenetration-testing+2

7 months ago

stunner

firefart/stunner

Test and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…

exploitationmisconfigurationnetwork-security+3

86722h 25m ago

CVE-2020-9283

brompwnie/cve-2020-9283

Exploit for CVE-2020-9283 based on Go

exploitationnetwork-securitypenetration-testing+1

66 years ago

pi-hole

pi-hole/pi-hole

A black hole for Internet advertisements

dns-analysisnetwork-securityprivacy+1

61.2k3 months ago

simplewall

henrypp/simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.

defensive-toolsnetwork-security

9.1k10 days ago

goproxy

elazarl/goproxy

A customizable HTTP/HTTPS proxy library for Go supporting regular forwarding, CONNECT tunneling, MITM TLS interception, and programmatic…

general-purpose-utilitiesnetwork-securityweb-proxies-interception+1

6.8k13 days ago

rathole

rathole-org/rathole

A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

general-purpose-utilitiesnetwork-securityutilities-frameworks

14.3k1 month ago

mosh

mobile-shell/mosh

Remote terminal application supporting intermittent connectivity, IP roaming, and speculative local echo for high-latency links. Uses AES-128…

general-purpose-utilitiesnetwork-security

14.6k7 months ago

proxychains

haad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

dns-analysisnetwork-securitypenetration-testing+1

8.0k2 years ago

tcpcopy

session-replay-tools/tcpcopy

An online request replication and TCP stream replay tool, ideal for real testing, performance testing, stability testing, stress testing, load…

network-securitypenetration-testingscripting-automation+1

4.7k1 year ago

Previous 1 234…16 Next