Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

282 results

ansible-cve-2023-36845

p4x1s/ansible-cve-2023-36845

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

devsecopsnetwork-securityscripting-automation+2

2 years ago

CVE-2018-10933

kristyna-mlcakova/cve-2018-10933

Proof-of-concept exploit for CVE-2018-10933, a server-side authentication bypass in libssh allowing unauthorized remote code execution on vulnerable…

exploitationnetwork-securitypenetration-testing+2

6 years ago

CVE-2024-6387

mrmtwoj/cve-2024-6387

regreSSHion is a security tool designed to test for vulnerabilities related to CVE-2024-6387, specifically focusing on SSH and remote access…

exploitationnetwork-securitypenetration-testing+3

2 years ago

cve-2020-35498-flag

freddierice/cve-2020-35498-flag

C-based exploit tool to detect and trigger CVE-2020-35498 via raw socket injection with BPF filter, targeting wireless interfaces for vulnerability…

binary-analysisexploitationnetwork-security+2

5 years ago

cve-2020-0796-Scanner

intelliroot-tech/cve-2020-0796-scanner

This tool helps scan large subnets for cve-2020-0796 vulnerable systems

exploitationnetwork-securitypenetration-testing+2

6 years ago

CVE-2024-3661VPN

roundthe-clock/cve-2024-3661vpn

Exploit tool targeting CVE-2024-3661 in VPN products, providing proof-of-concept code for security testing and vulnerability verification.

exploitationnetwork-securitypenetration-testing+2

1 year ago

Windows-CVE-2024-38063

fredagsguf/windows-cve-2024-38063

Exploit for CVE-2024-38063, a critical RCE in Windows TCP/IP stack via crafted IPv6 packets, enabling arbitrary code execution and system compromise.

exploitationnetwork-securitypenetration-testing+2

1 year ago

Samba-CVE-2021-44142

hrsman/samba-cve-2021-44142

Python tool to check Samba servers for CVE-2021-44142 by leaking heap cookies and pointers via a single SMB connection, demonstrating exploitability.

exploitationnetwork-securitypenetration-testing+2

4 years ago

dtls-fuzzer

pfg666/dtls-fuzzer

dtls-fuzzer is a protocol-state-fuzzer for DTLS server implementations.

fuzzingnetwork-security

5 years ago

astDoS

rodrigo-d/astdos

Tool to exploit CVE-2018-7284 and CVE-2018-19278

exploitationnetwork-securityvulnerability-analysis

7 years ago

GHOSTCHECK-cve-2015-0235

chayim/ghostcheck-cve-2015-0235

A check for GHOST; cve-2015-0235

network-securitypenetration-testingscripting-automation+2

6 years ago

h2spacex

nxenon/h2spacex

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

exploitationfuzzingnetwork-security+6

2293 months ago

Archived

mitmengine

cloudflare/mitmengine

A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:

defensive-toolsincident-responsenetwork-security+1

8122 years ago

testssl.sh

testssl/testssl.sh

Testing TLS/SSL encryption anywhere on any port

cryptographynetwork-securitypenetration-testing+2

9.2k4 days ago

openssh-portable

openssh/openssh-portable

Portable OpenSSH

authenticationcryptographynetwork-security+1

4.0k9h 35m ago

sish

antoniomika/sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

general-purpose-utilitiesnetwork-securityutilities-frameworks+1

4.8k2 days ago

yara-x

virustotal/yara-x

A rewrite of YARA in Rust.

binary-analysisdata-recoverydefensive-tools+14

1.3k2 days ago

vopono

jamesmcm/vopono

Run applications through VPN tunnels with temporary network namespaces

network-securityprivacyutilities-frameworks

1.4k21 days ago

Previous 1…789…16 Next