Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2084 results

amlsec

sbaresearch/amlsec

Automated Security Risk Identification Using AutomationML-based Engineering Data

papers-researchscada-ics-securityvulnerability-analysis

304 years ago

xtride

pr0me/xtride

N-gram-based type recovery tool for binaries, recovering structures and function signatures from decompiled code with high throughput and actionable…

binary-analysisdebuggerseducation+5

264 months ago

Iran-War-Media

albintouma/iran-war-media

Iran War Media Monitor collects news articles covering the US-Israeli war on Iran and applies sentiment analysis to uncover who supports and opposes…

crawlereducationinformation-gathering+3

193 months ago

AutoRAN-public

jackpurcell/autoran-public

Automated framework for hijacking safety reasoning in large reasoning models via simulated reasoning traces and iterative prompt refinement to…

adversarial-attackai-securityexploitation+2

111 year ago

OSIB

owasp/osib

Centralized YAML-based knowledge base linking MITRE CWE, OWASP Top10, ASVS, and other security standards with versioned references. Includes MkDocs…

curated-resourceseducationlearning-paths-courses+4

61 year ago

awesome-cybersecurity-resources

horkimhab/awesome-cybersecurity-resources

Curated collection of cybersecurity resources including tools, articles, and repositories, structured with YAML frontmatter and automated discovery…

curated-resourceseducationpapers-research

124 days ago

SBOM-VEX-Taint-Analysis

owasp/sbom-vex-taint-analysis

Automated SBOM-to-VEX pipeline using a secure multi-agent AI system to analyze CVEs, reason about exploitability, and generate signed CycloneDX VEX…

ai-securitycurated-resourceseducation+3

23 months ago

context-segmentation

9xeb/context-segmentation

Multi-agent automated context management for long horizon tasks in local AI Agents

ai-securityctfeducation+3

14 months ago

CVE-2025-66204

lukasz-rybak/cve-2025-66204

Proof-of-concept for CVE-2025-66204: brute-force protection bypass in WBCE CMS via spoofed X-Forwarded-For header, with automated Python exploit…

authenticationeducationpapers-research+3

6 months ago

CVE-2024-57610

h4ckm3-png/cve-2024-57610

Proof-of-concept demonstrating lack of rate limiting on the Sylius v2.0.2 login endpoint, enabling unrestricted automated authentication attempts.

authenticationpapers-researchpenetration-testing+2

1 year ago

unthemidator

x86rc/unthemidator

An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool

binary-analysisbinary-exploitationdebuggers+4

3076 days ago

BotLens

ua-spectral/botlens

Research artifact and MCP server that audits security and privacy concerns in third-party Discord bots via large-scale review analysis, LLM labeling,…

crawlereducationinformation-gathering+5

10 days ago

logparser

logpai/logparser

A machine learning toolkit for log parsing [ICSE'19, DSN'16]

anomaly-detectionlog-analysismachine-learning+1

2k1 year ago

CVE-2025-38352-PoC

longwasu/cve-2025-38352-poc

PoC and GDB script assists in triggering CVE-2025-38352

binary-exploitationdebuggerseducation+5

1 month ago

gha-lab-6ab39df295

pvharmo2/gha-lab-6ab39df295

Controlled security-research lab reproducing CVE-2024-45798 (GHSA-h52q-xhg2-6jw8) in espressif/arduino-esp32 — poisoned-artifact pwn request via…

curated-resourceseducationexploitation+2

2 months ago

gha-lab-fb32aba4a3

pvharmo2/gha-lab-fb32aba4a3

Authorized lab reproduction of CVE-2023-26493 (GHSL-2023-027): command injection via github.head_ref in cocos-engine's <Web> Interface check…

educationexploitationpapers-research+1

2 months ago

gha-lab-ca4fa82ac5

pvharmo2/gha-lab-ca4fa82ac5

Security-research lab: reproduction of CVE-2026-29075 (GHSA-3j55-5q6x-2h48) in mesa/mesa benchmarks.yml pull_request_target workflow — single-commit…

curated-resourcesdevsecopseducation+3

1 month ago

gha-lab-733c168b88

pvharmo2/gha-lab-733c168b88

Reproduces CVE-2026-44246, a prompt injection vulnerability in nnU-Net's GitHub Actions triage agent, demonstrating how issue content is inlined into…

ai-securityeducationpapers-research+1

1 month ago

Previous 123…100 Next