Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

282 results

StreamDivert

jellever/streamdivert

Redirecting (specific) TCP, UDP and ICMP traffic to another destination.

network-securitypenetration-testingred-teaming

4455 years ago

socks5

wzshiming/socks5

Socks5/Socks5h server and client. Full TCP/Bind/UDP and IPv4/IPv6 support

general-purpose-utilitiesnetwork-securitypenetration-testing+2

13125 days ago

vsaudit

ociredefz/vsaudit

VOIP Security Audit Framework

exploitationnetwork-securitypenetration-testing+1

1098 years ago

wotop

nishitm/wotop

Web on top of any protocol

network-securityweb-proxies-interception

1116 years ago

Pummel

hc133/pummel

Socks5 Proxy HTTP/HTTPS-Flooding (cc) Test

network-securitypenetration-testingweb-security

1081 year ago

egression

danielmiessler/egression

Test a network's egress controls with various levels of success and failure.

data-exfiltrationnetwork-securitypenetration-testing+1

1079 years ago

DatajackProxy

nccgroup/datajackproxy

Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms

network-securitypenetration-testingred-teaming+2

1047 years ago

snmp-shell

mxrch/snmp-shell

Shell Simulation over Net-SNMP with extend functionality

command-and-controlexploitationnetwork-security+3

1005 years ago

doona

wireghoul/doona

Network based protocol fuzzer

binary-analysisexploitationfuzzing+3

774 years ago

mofos

synacktiv/mofos

Virtual machines manipulation framework

network-securitypenetration-testingred-teaming+3

1096 months ago

ufuzz

phikshun/ufuzz

Universal Plug and Fuzz

embedded-systems-securityfuzzingiot-security+3

417 years ago

raspi-corelight

corelight/raspi-corelight

Corelight@Home script

intrusion-detectionlog-analysisnetwork-security+1

453 years ago

Puma6Fail

lunnova/puma6fail

CVE-2017-5693 Denial of service vulnerability in Puma 6 modems

embedded-systems-securityexploitationhardware-security+2

162 years ago

pingback

corelight/pingback

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

command-and-controlintrusion-detectionmalware-analysis+2

121 year ago

Apple-Remote-Crash-Tool-CVE-2018-4407

anonymouz4/apple-remote-crash-tool-cve-2018-4407

Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network

exploitationnetwork-securitypenetration-testing+3

47 years ago

CVE-2023-25136_POC

axylisdead/cve-2023-25136_poc

CVE-2023-25136 POC written by axylisdead

exploitationnetwork-securitypenetration-testing+2

33 years ago

airdecloak-ng

alt3kx/airdecloak-ng

My Aircrack-ng contribution with Thomas d'Otreppe

network-securitypacket-sniffing-analysispenetration-testing+2

44 years ago

CVE-2026-57850

sn0x-sharma/cve-2026-57850

RustDesk < 1.4.9 - Missing Session-Scope Enforcement Allows Out-of-Scope Control Message Injection

exploitationnetwork-securitypenetration-testing+3

12 months ago

Previous 1…8910…16 Next