Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1787 results

CVE-2024-6387-Vulnerability-Checker

identity-threat-labs/cve-2024-6387-vulnerability-checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports.…

exploitationinformation-gatheringnetwork-security+3

1 year ago

CVE-2018-14847

tausifzaman/cve-2018-14847

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The…

exploitationinformation-gatheringnetwork-security+3

11 year ago

http-vuln-cve2020-3452.nse

gh0st0ne/http-vuln-cve2020-3452.nse

CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script

exploitationinformation-gatheringnetwork-security+3

5 years ago

CVE-2024-6387

r4tw1z/cve-2024-6387

This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH. The tool…

exploitationinformation-gatheringnetwork-security+3

12 years ago

CVE-2023-4596-OpenSSH-Multi-Checker

x-projetion/cve-2023-4596-openssh-multi-checker

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an…

information-gatheringnetwork-securitypenetration-testing+3

12 years ago

CVE-2018-12633-TPLink-Auth-Bypass

wiliam227user/cve-2018-12633-tplink-auth-bypass

A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware (CVE-2018-12633).

data-exfiltrationeducationembedded-systems-security+8

7 months ago

heartbleed

iscinc/heartbleed

A checker (site and tool) for CVE-2014-0160. Software from @FiloSottile for iSC Inc..

information-gatheringnetwork-securitypenetration-testing+2

11 years ago

open-ssh-user-enumeration

makmour/open-ssh-user-enumeration

This script checks for the OpenSSH 7.7 (and prior) username enumeration vulnerability (CVE-2018-15473). It sends a malformed authentication packet…

exploitationinformation-gatheringnetwork-security+3

1 year ago

dlkploit600

halencarjunior/dlkploit600

Simple Python script for D-Link vulnerability scan and test [CVE-2019-13101]

exploitationinformation-gatheringnetwork-security+3

7 years ago

CVE-2020-23593

huzaifahussain98/cve-2020-23593

INFORMATION DISCLOSURE :CSRF to enable syslog mode and send to remote syslog server IP and Port.

exploitationinformation-gatheringnetwork-security+2

3 years ago

NTP_CVE-2013-5211

requiempentest/ntp_cve-2013-5211

Exploit and check CVE-2013-5211

exploitationinformation-gatheringnetwork-security+2

1 year ago

cve_2023_38408_scanner

fazilbaig1/cve_2023_38408_scanner

Vulnerability Overview CVE-2023-38408 affects OpenSSH versions < 9.3p2 and stems from improper validation of data when SSH agent forwarding is…

exploitationinformation-gatheringnetwork-security+2

1 year ago

easy_security

moon1705/easy_security

Project with sublist3r, massan, CVE-2018-15473, ssh bruteforce, ftp bruteforce and nikto.

exploitationinformation-gatheringnetwork-security+5

2 years ago

CVE-2024-24919-Check-Point-Remote-Access-VPN

graysignal/cve-2024-24919-check-point-remote-access-vpn

Scan for and exploit CVE-2024-24919 in Check Point Security Gateways, an unauthenticated arbitrary file read that can expose credentials and lead to…

exploitationinformation-gatheringnetwork-security+2

12 years ago

CVE-2023-48795

hav0cx0/cve-2023-48795

Scans SSH servers for Terrapin-affected OpenSSH versions by grabbing banners over port 22, enabling quick internal audits, penetration testing, and…

information-gatheringnetwork-securitypenetration-testing+2

1 year ago

CVE-2026-56848

open-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

dynamic-code-analysisexploitationnetwork-security+2

2 days ago

Archived

Heartbleed

mozilla-services/heartbleed

A checker (site and tool) for CVE-2014-0160

information-gatheringnetwork-securityvulnerability-scanners+1

37 years ago

Archived

melody

ma111e/melody

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

information-gatheringintrusion-detectionnetwork-security+5

1391 year ago

Previous 1…959697…100 Next