Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

126 results

cve-2022-21907

corelight/cve-2022-21907

Zeek package to detect CVE-2022-21907 HTTP exploit attempts by analyzing packet captures for malformed requests and triggering alerts.

exploitationintrusion-detectionnetwork-security+3

2 years ago

CVE-2022-21449

thack1/cve-2022-21449

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

intrusion-detectionnetwork-securitypacket-sniffing-analysis+1

54 years ago

CVE-2024-51179

lakshmirnr/cve-2024-51179

Proof-of-concept exploit for CVE-2024-51179: crafted PFCP packet flooding causes denial of service in Open5GS UPF/SMF, disrupting 5G core PDU session…

exploitationnetwork-securitypacket-sniffing-analysis+2

41 year ago

CVE-2021-26258

zwclose/cve-2021-26258

Files and tools for CVE-2021-26258

exploitationfirmware-analysismalware-analysis+3

33 years ago

zeek-mercury-npf

corelight/zeek-mercury-npf

Zeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.

defensive-toolsnetwork-securitypacket-sniffing-analysis

3 months ago

shellshock

themson/shellshock

scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271

exploitationnetwork-securitypacket-sniffing-analysis+2

112 years ago

CVE-2021-33959

lixiang957/cve-2021-33959

Proof-of-concept exploit for CVE-2021-33959 demonstrating UDP reflection amplification attack against Plex Media Server via crafted M-SEARCH packets…

dns-analysisexploitationnetwork-security+2

13 years ago

CVE-2010-4669

wrong-commit/cve-2010-4669

Python-based exploit for CVE-2010-4669 using Scapy to send crafted packets for network vulnerability testing. Requires root and Python 2.

exploitationnetwork-securitypacket-sniffing-analysis+1

2 years ago

cve-2020-35498-flag

freddierice/cve-2020-35498-flag

C-based exploit tool to detect and trigger CVE-2020-35498 via raw socket injection with BPF filter, targeting wireless interfaces for vulnerability…

binary-analysisexploitationnetwork-security+2

5 years ago

CVE-2022-47522-PoC

toffeenutt/cve-2022-47522-poc

Proof-of-concept exploit for CVE-2022-47522 demonstrating Wi-Fi frame interception via deauthentication attack and MAC address spoofing to capture…

exploitationpacket-sniffing-analysispenetration-testing+3

1 year ago

curveball_lua

dlee35/curveball_lua

Repo containing lua scripts and PCAP to find CVE-2020-0601 exploit attempts via network traffic

exploitationintrusion-detectionnetwork-security+3

6 years ago

CVE-2025-32407

diegovargasj/cve-2025-32407

Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…

dns-analysisexploitationmobile-security+6

1 year ago

cve-2013-4348

bl4ck5un/cve-2013-4348

DOS (infinite loop) attack via a small value in the IHL field of a packet with IPIP encapsulation

exploitationnetwork-securitypacket-sniffing-analysis+1

12 years ago

Archived

bettercap

evilsocket/bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

dns-analysisnetwork-securitypacket-sniffing-analysis+3

2.5k8 years ago

Archived

teamcity-CVE-2026-63077-pcap

boredhackerblog/teamcity-cve-2026-63077-pcap

teamcity teamcity-CVE-2026-63077 exploitation pcap

exploitationintrusion-detectionnetwork-security+2

2 months ago

Archived

LOG4J-CVE-2021-44228

sumitpathania03/log4j-cve-2021-44228

Proof-of-concept for Log4Shell (CVE-2021-44228) demonstrating remote code execution via JNDI injection, including vulnerable server setup, exploit…

command-and-controlexploitationpacket-sniffing-analysis+3

3 years ago

Archived

libhtp

oisf/libhtp

Security-aware HTTP protocol parser library used by IDS/IPS engines to inspect and normalize HTTP traffic for threat detection.

defensive-toolsintrusion-detectionnetwork-security+3

3072 months ago

Archived

isip

halit/isip

Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.

fuzzingnetwork-securitypacket-sniffing-analysis+3

7910 years ago

Previous 1 2 345 6 7 Next