Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

135 results

Archived

lightwave

vmware-archive/lightwave

Identity services for traditional infrastructure, applications and containers.

authentication-authorizationcloud-securitycontainer-security+3

318

4 years ago

firehol

firehol/firehol

iptables-based stateful firewall with human-friendly configuration and optional QoS (FireQOS) for bandwidth management.

defensive-toolsnetwork-access-controlnetwork-security

1.6k5 months ago

cve-2018-10933

hackerhouse-opensource/cve-2018-10933

Docker-based CVE-2018-10933 libssh authentication bypass exploit with patched client for testing SSH server vulnerabilities and unauthorized access…

authenticationcontainer-securityexploitation+3

1107 months ago

Fortinet-CVE-2022-40684

jsongmax/fortinet-cve-2022-40684

Go-based exploit tool for CVE-2022-40684 (Fortinet authentication bypass). Automates SSH key injection for authorized penetration testing and…

exploitationnetwork-securitypenetration-testing+3

23 years ago

Archived

APOLOGEE

rosesecurity/apologee

APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers (all…

authenticationexploitationexploit-frameworks+8

501 year ago

Responder

lgandx/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

authenticationdns-analysisdns-fuzzing+10

6.6k3 months ago

brutus

praetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

authenticationexploitationinformation-gathering+7

3244h 20m ago

WireBug

syss-research/wirebug

WireBug is a toolset for Voice-over-IP penetration testing

authenticationencryption-decryption-toolsfuzzing+3

1774 years ago

CVE-2026-24061-POC

jayglxr/cve-2026-24061-poc

Proof-of-concept exploit for CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd via crafted NEW_ENVIRON USER variable,…

authenticationexploitationnetwork-security+3

677 months ago

LibSSH-Authentication-Bypass

nikhil1232/libssh-authentication-bypass

LibSSH Authentication Bypass CVE-2018-10933

exploitationnetwork-securitypenetration-testing+2

67 years ago

CVE-2026-0257

tushargurav28/cve-2026-0257

Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish…

authenticationcryptographyexploitation+5

33 months ago

CVE-2026-24061

balgan/cve-2026-24061

inetutils-telnetd Authentication Bypass - working

authenticationexploitationnetwork-security+3

37 months ago

CVE-2020-1472

akash7350/cve-2020-1472

Python exploit that tests domain controllers for Zerologon (CVE-2020-1472) and resets the vulnerable machine account password through Netlogon…

authenticationexploitationnetwork-security+2

23 years ago

CVE-2026-24061

przemytn/cve-2026-24061

Proof-of-concept exploit for CVE-2026-24061, a telnetd authentication bypass via argument injection in the USER environment variable, allowing…

authenticationexploitationnetwork-security+3

5 months ago

cpanelscanner

0dev1337/cpanelscanner

Scans internet-exposed cPanel/WHM instances for CVE-2026-41940 authentication bypass, probing HTTPS on port 2087 and matching response markers to…

network-securitypenetration-testingreconnaissance+2

14 months ago

CVE-2024-20674

gpotter2/cve-2024-20674

Exploit for CVE-2024-20674: Kerberos mutual authentication bypass via logic bug in client-side U2U TGT-REP handling. Enables unauthenticated network…

authenticationexploitationnetwork-security+2

11 year ago

SecuraBV-CVE-2020-1472

fa1c0n35/securabv-cve-2020-1472

Python script using Impacket to test for the Zerologon vulnerability (CVE-2020-1472) by attempting Netlogon authentication bypass on Domain…

authenticationexploitationnetwork-security+2

15 years ago

CVE-2026-24061

infat0x/cve-2026-24061

Proof-of-concept exploit for Telnet NEW-ENVIRON authentication bypass vulnerability (CVE-2026-24061). Allows unauthorized access to vulnerable Telnet…

exploitationnetwork-securitypenetration-testing+2

17 months ago

Previous 1…567 8 Next