Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

55 results

ofp_sniffer

amlight/ofp_sniffer

An OpenFlow sniffer to help network troubleshooting in production networks.

educationnetwork-mappingnetwork-security+1

153 months ago

anycast-census

ut-dacs/anycast-census

Longitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing…

curated-resourcesdns-analysisinformation-gathering+5

191 day ago

ratbag-toolbox

libratbag/ratbag-toolbox

Random reverse engineering knowledge and tools

curated-resourceseducationfirmware-analysis+3

147 years ago

PacketPatch

xuyw-seu/packetpatch

Practical black-box adversarial packet generation against encrypted traffic classification with minimal overhead and full packet recoverability.

adversarial-attackai-securityeducation+6

74 months ago

CVE-2026-110912

0xblackash/cve-2026-110912

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

defensive-toolseducationexploitation+5

218 days ago

DetectPacket-CVE-2017-8464

trg-1999/detectpacket-cve-2017-8464

Exploit vulnerabilities and vulnerability prevention implementation

educationexploitationforensics+6

24 years ago

vm-homelab-log4shell-assessment

yili-soc/vm-homelab-log4shell-assessment

Full-lifecycle vulnerability management on a live Log4Shell (CVE-2021-44228) target — scan, manual exploitation, network detection, and remediation…

educationexploitationintrusion-detection+7

2 months ago

Kali-Metasploitable

ivoalbacete/kali-metasploitable

Escaneo de vulnerabilidades, análisis de tráfico con Wireshark y explotación controlada del CVE-2011-2523 (vsftpd 2.3.4) en entorno de red segura.

ctfeducationexploitation+9

6 months ago

evillcode

alexanderortizscript/evillcode

Herramienta de auditoría y análisis de redes para Kali Linux.

educationinformation-gatheringnetwork-mapping+4

16 months ago

Scanning

aidilzlkfli/scanning

Analysis of network scan results, service vulnerabilities, OS fingerprinting, and critical Nessus findings including Ghostcat (CVE-2020-1938).

ctfeducationexploitation+6

6 months ago

DNS-Poisoning-Triage-Lab

nicholasc03/dns-poisoning-triage-lab

Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping,…

dns-analysiseducationforensics+6

13 months ago

log4j-pcap-activity

apipia/log4j-pcap-activity

A fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)

ctfeducationexploitation+3

14 years ago

DroneCamera

mretallack/dronecamera

Drone HASAKEE FPV video app for Android

educationembedded-systems-securityfirmware-analysis+5

6 months ago

Intrusion-Alert-Educational-Network-IDS

owasp/intrusion-alert-educational-network-ids

Lightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…

anomaly-detectiondefensive-toolseducation+3

6 months ago