Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
71 results
detect-ransomware-filenames preview

detect-ransomware-filenames

GitHubcorelight/detect-ransomware-filenames

Zeek script that monitors SMB traffic and alerts on known ransomware filenames using the Anti-Ransomware File System Resource Manager list.

defensive-toolsintrusion-detectionmalware-analysis+2
22
1 year ago
BPFDoor-controller-source preview

BPFDoor-controller-source

GitHubhaxrob/bpfdoor-controller-source

Source code for a BPFDoor backdoor controller supporting TCP, UDP, ICMP, and HTTPS covert communication channels with magic packet activation,…

command-and-controlexploitationmalware-analysis+4
156 months ago
pingback preview

pingback

GitHubcorelight/pingback

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

command-and-controlintrusion-detectionmalware-analysis+2
121 year ago
zeek-elf preview

zeek-elf

GitHubcorelight/zeek-elf

A Zeek ELF File Analyzer

binary-analysisintrusion-detectionmalware-analysis+2
92 years ago
CVE-2017-5638_struts preview

CVE-2017-5638_struts

GitHubinitconf/cve-2017-5638_struts

Bro/Zeek script for detecting Apache Struts CVE-2017-5638 reconnaissance, compromise, and malware download tracking with automated IP extraction.

exploitationintrusion-detectionmalware-analysis+3
89 years ago
shadowhammer preview

shadowhammer

GitHubwithsecurelabs/shadowhammer

Batch-mode checker for Shadowhammer malware indicators, scanning local or provided MAC addresses against known malicious hashes, with offline support…

defensive-toolsincident-responsemalware-analysis+2
87 years ago
zeek-netsupport-detector preview

zeek-netsupport-detector

GitHubcorelight/zeek-netsupport-detector

A Zeek based NetSupport detector. NetSupport is often abused by attackers in malware.

command-and-controldefensive-toolsintrusion-detection+3
31 year ago
zeek-quasarrat-detector preview

zeek-quasarrat-detector

GitHubcorelight/zeek-quasarrat-detector

Zeek detector for QuasarRat

anomaly-detectionintrusion-detectionmalware-analysis+2
31 year ago
SUNBURST preview

SUNBURST

GitHubmalwaremorghulis/sunburst

Detection for SUNBURST C2 Stage-1 using Shannon Entropy

anomaly-detectioncommand-and-controldns-analysis+3
33 years ago
zeek-asyncrat-detector preview

zeek-asyncrat-detector

GitHubcorelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

anomaly-detectioncommand-and-controlintrusion-detection+3
31 year ago
Cisco-FMC-honeypot preview

Cisco-FMC-honeypot

GitHubhassan-pouladi/cisco-fmc-honeypot

Originally a Honeypot for CVE-2026-20131

incident-responsemalware-analysisnetwork-security+2
23 months ago
zeek-strrat-detector preview

zeek-strrat-detector

GitHubcorelight/zeek-strrat-detector

A Zeek based STRRAT malware detector.

defensive-toolsintrusion-detectionmalware-analysis+2
11 year ago
zeek-agenttesla-detector preview

zeek-agenttesla-detector

GitHubcorelight/zeek-agenttesla-detector

A Zeek based Agent Tesla malware C2 detector.

intrusion-detectionmalware-analysisnetwork-security+1
211 months ago
zeek-gozi-detector preview

zeek-gozi-detector

GitHubcorelight/zeek-gozi-detector

A Zeek based Gozi banking malware detector.

intrusion-detectionmalware-analysisnetwork-security
11 year ago
zeek-spicy-facefish preview

zeek-spicy-facefish

GitHubcorelight/zeek-spicy-facefish

A Zeek protocol analyzer for the Facefish rootkit, based on Spicy.

command-and-controlintrusion-detectionmalware-analysis+1
14 years ago
honeypot.rs preview

honeypot.rs

GitHubmranv/honeypot.rs

CVE-2023-46604 (Apache ActiveMQ RCE Vulnerability) and focused on getting Indicators of Compromise.

incident-responsemalware-analysisnetwork-security+2
2 years ago
purpleteam-tls-checker preview
Archived

purpleteam-tls-checker

GitLabpurpleteam-labs/purpleteam-tls-checker

TLS checking component of purpleteam

cloud-securitydevsecopsnetwork-security+2
15 years ago
Previous1234Next