Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

387 results

Nettacker

owasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

api-securityapi-security-testingdynamic-code-analysis+14

5.6k

18h 49m ago

HellRaiser

m0nad/hellraiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

network-securityport-scanningvulnerability-analysis+1

5844 years ago

CVE-2025-53770

daryllundy/cve-2025-53770

Network-based vulnerability scanner for detecting systems vulnerable to CVE-2025-53770 (unsafe deserialization). Includes PowerShell and Python…

code-analysisnetwork-securitypenetration-testing+3

1 year ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

31.7k1 day ago

vuls

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

cloud-securityconfiguration-auditingcontainer-security+5

12.3k3 days ago

flan

cloudflare/flan

A pretty sweet vulnerability scanner

cloud-securitycontainer-securitynetwork-security+2

4.2k2 years ago

nerve

paytmlabs/nerve

NERVE Continuous Vulnerability Scanner

information-gatheringmisconfigurationnetwork-security+3

4552 years ago

vscan

xen0vas/vscan

vulnerability scanner tool using nmap and nse scripts

network-securitypenetration-testingvulnerability-analysis+1

2092 years ago

MassBleed

1n3/massbleed

MassBleed SSL Vulnerability Scanner

network-securitypenetration-testingvulnerability-scanners

2506 years ago

cve-2019-1040-scanner

fox-it/cve-2019-1040-scanner

SMB vulnerability scanner that detects CVE-2019-1040 by sending invalid NTLM authentication packets, enabling MIC Remove relay attacks for domain…

authenticationexploitationnetwork-security+2

3006 years ago

prowler

tlkh/prowler

Distributed Network Vulnerability Scanner

information-gatheringnetwork-mappingnetwork-security+3

1247 years ago

threat-finder

offseq/threat-finder

Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.

devsecopsnetwork-securitythreat-intelligence+2

601 month ago

zeroscan

b34mr/zeroscan

Zeroscan is a Domain Controller vulnerability scanner, that currently includes checks for Zerologon (CVE-2020-1472), MS-PAR/MS-RPRN and SMBv2 Signing.

exploitationnetwork-securitypenetration-testing+2

114 years ago

MS09-050

bytejmp/ms09-050

Python exploit for MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow, with vulnerability scanner, arch auto-detection, and x86/x64 reverse…

exploitationinformation-gatheringnetwork-security+7

14 days ago

VulnScan-Pro

guppss/vulnscan-pro

⚡ Professional vulnerability scanner — port scanning, CVE detection, risk scoring & PDF reports in a dark PyQt6 dashboard

information-gatheringnetwork-securitypenetration-testing+4

83 months ago

Dead.Letter-CVE-2026-45185

liamromanis101/dead.letter-cve-2026-45185

Shell-based vulnerability scanner for CVE-2026-45185 (Dead.Letter) in Exim MTA. Detects use-after-free in GnuTLS builds, checks version, TLS library,…

configuration-auditingdevsecopsemail-security+5

24 months ago

sentinelssh

harshinsecurity/sentinelssh

SentinelSSH is an advanced, high-performance SSH vulnerability scanner written in Go. It's specifically designed to detect the CVE-2024-6387…

exploitationinformation-gatheringnetwork-security+3

42 years ago

cve-2026-1731-scanner

cybrdude/cve-2026-1731-scanner

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

defensive-toolseducationinformation-gathering+5

47 months ago

Previous12…22 Next