Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
52 results
fscan preview

fscan

GitHubshadow1ng/fscan

一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

educationexploitationlateral-movement+9
14.4k
1 month ago
hexstrike-ai preview

hexstrike-ai

GitHub0x4m4/hexstrike-ai

MCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…

binary-analysiscloud-securityctf+9
11.2k17 days ago
Nettacker preview

Nettacker

GitHubowasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

information-gatheringnetwork-securitypassword-attacks+7
5.5k8h 25m ago
changeme preview

changeme

GitHubztgrace/changeme

A default credential scanner.

network-securitypassword-attackspenetration-testing+2
1.5k1 year ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubxaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

email-securityexploitationinformation-gathering+5
7692 years ago
WinboxPoC preview
Archived

WinboxPoC

GitHubbasucert/winboxpoc

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

exploitationinformation-gatheringnetwork-security+3
5205 years ago
kaboom preview

kaboom

GitHubleviathan36/kaboom

A tool to automate penetration tests

exploit-frameworksinformation-gatheringpassword-attacks+4
3825 years ago
powersap preview

powersap

GitHubairbus-seclab/powersap

Powershell SAP assessment tool

exploitationpassword-attackspenetration-testing+1
2038 years ago
aad-sso-enum-brute-spray preview

aad-sso-enum-brute-spray

GitHubtreebuilder/aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

authentication-authorizationcloud-securityinformation-gathering+3
1934 years ago
BlackDir-Framework preview

BlackDir-Framework

GitHubjehadalqurashi/blackdir-framework

Web Application Vulnerability Scanner

encryption-decryption-toolshash-analysisinformation-gathering+5
1375 years ago
prowler preview

prowler

GitHubtlkh/prowler

Distributed Network Vulnerability Scanner

information-gatheringnetwork-mappingnetwork-security+3
1247 years ago
wodat preview

wodat

GitHubinitroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1
804 years ago
fuckshitup preview

fuckshitup

GitHubsmaash/fuckshitup

php-cli vulnerability scanner

information-gatheringpassword-attackspenetration-testing+2
7911 years ago
Mikrotik-router-hack preview

Mikrotik-router-hack

GitHubhacker30468/mikrotik-router-hack

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The…

exploitationinformation-gatheringnetwork-security+3
555 years ago
Python-MikrotikLoginExploit preview

Python-MikrotikLoginExploit

GitHubsinichi449/python-mikrotikloginexploit

PoC of CVE-2018-14847 Mikrotik Vulnerability using simple script

exploitationinformation-gatheringnetwork-security+3
216 years ago
Athanasius preview

Athanasius

GitHubshyam999/athanasius

Framework for penetration testing. The software can identify everything from cross-site scripting to SQL injection. Developers can also use this…

password-attackspenetration-testingvulnerability-scanners+1
194 years ago
CVE-2024-28987-POC preview

CVE-2024-28987-POC

GitHubgh-ost00/cve-2024-28987-poc

Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)

authenticationexploitationmisconfiguration+3
121 year ago
CVE-2017-8225-EXPLOIT preview

CVE-2017-8225-EXPLOIT

GitHubk3ystr0k3r/cve-2017-8225-exploit

A PoC exploit for CVE-2017-8225 - GoAhead System.ini Leak

exploitationinformation-gatheringiot-security+3
92 years ago
Previous123Next