Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
329 results
CVE-2025-56764 preview

CVE-2025-56764

GitHubremenis/cve-2025-56764

Username Enumeration in Trivision NC-227WF

authenticationinformation-gatheringpassword-attacks+3
10 months ago
CVE-2025-60787 preview

CVE-2025-60787

GitHubagent-skywalker/cve-2025-60787

MotionEye v0.43.1b4 OS Command Injection

command-and-controlexploitationpassword-attacks+5
5 months ago
Tool_Exploit_Password_Camera_CVE-2018-9995 preview

Tool_Exploit_Password_Camera_CVE-2018-9995

GitHublequockhanh2k/tool_exploit_password_camera_cve-2018-9995
exploitationiot-securitypassword-attacks+3
4 years ago
gardyn preview

gardyn

GitHubmselbrede/gardyn

CVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631

command-and-controlembedded-systems-securityexploitation+8
1 year ago
CVE-2023-22074 preview

CVE-2023-22074

GitHubemad-almousa/cve-2023-22074

CVE-2023-22074

database-securityexploitationinformation-gathering+2
2 years ago
Modules preview
Archived

Modules

GitHubhavocframework/modules

Modules used by the Havoc Framework

authenticationcommand-and-controlinformation-gathering+5
2732 years ago
Kerberos-CVE-2026-27912 preview

Kerberos-CVE-2026-27912

GitHuboxstussz-eng/kerberos-cve-2026-27912

PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…

authentication-authorizationexploitationpassword-attacks+2
6 days ago
CrackMapExec preview
Archived

CrackMapExec

GitHubbyt3bl33d3r/crackmapexec

A swiss army knife for pentesting networks

command-and-controlexploitationinformation-gathering+5
9.2k2 years ago
f609-brute preview
Archived

f609-brute

GitHublc-at/f609-brute

Simple brute force tool for Telkom Indonesia's ZTE F609 routers

authenticationinformation-gatheringpassword-attacks+2
82 years ago
Passhunt preview

Passhunt

GitHubviralmaniar/passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their…

information-gatheringpassword-attackspenetration-testing+1
1.3k8 years ago
SSH-KILLv2 preview

SSH-KILLv2

GitHubxcodeon1/ssh-killv2

SSH brute-force tool targeting jailbroken iPhones with default 'alpine' password, featuring network scanning, wordlist-based cracking, and file…

ios-securitymobile-securitynetwork-mapping+1
95 years ago
datasploit preview

datasploit

GitHubdatasploit/datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and…

dns-subdomain-enumerationemail-harvestinginformation-gathering+6
3.3k9 months ago
pentest-tools preview

pentest-tools

GitHubgwen001/pentest-tools

A collection of custom security tools for quick needs.

dns-subdomain-enumerationfuzzinginformation-gathering+7
3.3k3 years ago
Vanquish preview

Vanquish

GitHubfrizb/vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active…

dns-subdomain-enumerationexploitationinformation-gathering+8
5168 years ago
powerview.py preview

powerview.py

GitHubaniqfakhrul/powerview.py

Enumerate and attack Active Directory with LDAP session persistence, ACL abuse, Kerberoasting/ASREProasting, shadow credentials, RBCD, and NTLM relay.

dns-analysisexploitationinformation-gathering+7
9873 months ago
chiasmodon preview

chiasmodon

GitHubchiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves…

dns-subdomain-enumerationemail-harvestinginformation-gathering+5
7001 year ago
GoMapEnum preview

GoMapEnum

GitHubnodauf/gomapenum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

cloud-securityemail-harvestinginformation-gathering+4
49211 months ago
CiscoRV320Dump preview

CiscoRV320Dump

GitHub0x27/ciscorv320dump

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

configuration-auditingexploitationpassword-attacks+3
2287 years ago
Previous1…111213…19Next