Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

71 results

CVE-2023-20198

atea-redteam/cve-2023-20198

CVE-2023-20198 Checkscript

exploitationinformation-gatheringnetwork-security+3

193 years ago

CVE-2024-3400

adanikamal/cve-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

command-and-controlexploitationnetwork-security+3

82 years ago

ldapserver

projectdiscovery/ldapserver

Package ldapserver implements LDAP Server

authentication-authorizationencryption-decryption-toolsidentity-access-management+2

72 years ago

CVE-2025-22968

crunzex/cve-2025-22968

Unauthenticated access in the default configuration of the D-Link DWR-M972V

embedded-systems-securityexploitationiot-security+3

61 year ago

Prommetrix

epsylon/prommetrix

Prommetrix can obtain relevant information from the instances of 'Node Exporter' executed by 'Prometheus'.

cloud-securityinformation-gatheringmisconfiguration+4

52 years ago

POC-CVE-2026-0300-exploit

sam00/poc-cve-2026-0300-exploit

Palo Alto - CVE-2026-0300 exploit

binary-exploitationexploitationnetwork-security+6

2 months ago

CVE-2025-20352

sentinel-aidefense/cve-2025-20352

CVE-2025-20352 Research writeup

educationexploitationincident-response+3

3 months ago

cve-2025-66723

audiopump/cve-2025-66723

CVE-2025-66723: inMusic Brands Engine DJ >=3.0.0 through <4.3.4 exposes local and network files to external parties

data-exfiltrationexploitationinformation-gathering+3

18 months ago

webui

baram01/webui

WebUI for AAA

authentication-authorizationidentity-access-managementnetwork-access-control+1

12 years ago

Cisco_CVE-2023-20198

reket99/cisco_cve-2023-20198

Python script to scan networks for Cisco IOS XE devices vulnerable to CVE-2023-20198, detecting implants via HTTP status and response analysis.

exploitationnetwork-securitypenetration-testing+3

3 years ago

Archived

WindowsFirewallRuleset

metablaster/windowsfirewallruleset

PowerShell scripts to automatically create rules for Windows firewall

configuration-auditingnetwork-securityscripting-automation

1801 year ago

Archived

katana

saintly2k/katana

Katana Botnet used for DDoS attacks based on the Mirai Botnet. TEACHING PURPOSES ONLY! I CANNOT BE HELD RESPONSIBLE FOR ANYTHING YOU DO WITH IT! I…

command-and-controleducationexploitation+3

553 years ago

doublepulsar-detection-script

withsecurelabs/doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

incident-responseintrusion-detectionmalware-analysis+2

1.0k9 years ago

dionaea

dinotools/dionaea

Low-interaction honeypot that emulates vulnerable network services to capture malware, shellcode, and exploit attempts, with IPv6 and TLS support.

defensive-toolsintrusion-detectionmalware-analysis+2

8185 years ago

amun

zeroq/amun

Amun Honeypot

defensive-toolsmalware-analysisnetwork-security+1

637 years ago

flowinspect

7h3ram/flowinspect

A Network Inspection Tool

forensicsfuzzingintrusion-detection+5

829 years ago

filterforge

cloudflare/filterforge

Tool for solving BPF filters and crafting packets based on these.

binary-analysisforensicsfuzzing+5

647 months ago

stegowiper

mindcrypt/stegowiper

A powerful and flexible tool to apply active attacks for disrupting stegomalware

defensive-toolsincident-responsemalware-analysis+2

564 years ago

Previous 1 234 Next