Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
328 results
RTSPbrute preview

RTSPbrute

GitLabwoolf/rtspbrute

Tool for RTSP that brute-forces routes and credentials, makes screenshots!

information-gatheringiot-securitypassword-attacks+1
27
5 years ago
Hikvision-City-Hunter preview

Hikvision-City-Hunter

GitHubvoidsshadows/hikvision-city-hunter

This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading…

exploitationinformation-gatheringiot-security+5
199 months ago
PasswordsSniffer preview

PasswordsSniffer

GitHubmauricelambert/passwordssniffer

This module sniff username and password of unprotected protocols.

information-gatheringnetwork-securitypacket-sniffing-analysis+2
95 years ago
internal-penetration-testing-project-using-Metasploit preview

internal-penetration-testing-project-using-Metasploit

GitHubabdullah50i/internal-penetration-testing-project-using-metasploit

Initialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB…

exploitationexploit-frameworksinformation-gathering+6
28 days ago
Confluence-Question-CVE-2022-26138- preview

Confluence-Question-CVE-2022-26138-

GitHubvulnmachines/confluence-question-cve-2022-26138-

Atlassian Confluence Server and Data Center: CVE-2022-26138

exploitationinformation-gatheringpassword-attacks+3
34 years ago
woo preview

woo

GitHubrandomrobbiebf/woo

Exploit woocommerce SQLI and grab user and password hash

data-exfiltrationexploitationinformation-gathering+3
25 years ago
cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure preview

cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

GitHubminanagehsalalma/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: unauthenticated ETHCheat=1 requests leak the admin password and Wi-Fi PSK from ZTE H298A/H108N routers.

exploitationinformation-gatheringiot-security+3
12 months ago
kyocera-cve-2022-1026_SOAP1.1 preview

kyocera-cve-2022-1026_SOAP1.1

GitHubh4po0n/kyocera-cve-2022-1026_soap1.1

An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords.

exploitationinformation-gatheringpassword-attacks+3
28 months ago
CVE-2017-7921 preview

CVE-2017-7921

GitHubgabrielavls/cve-2017-7921

CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.

exploitationinformation-gatheringiot-security+3
2 years ago
xpl-ModernWMS-CVE-2024-57698 preview

xpl-ModernWMS-CVE-2024-57698

GitHubrodolfomarianocy/xpl-modernwms-cve-2024-57698

It is possible to view the MD5 hash of the admin password and other attributes without authentication, even after initial setup and password change.…

exploitationinformation-gatheringmisconfiguration+3
1 year ago
easy_security preview

easy_security

GitHubmoon1705/easy_security

Project with sublist3r, massan, CVE-2018-15473, ssh bruteforce, ftp bruteforce and nikto.

exploitationinformation-gatheringnetwork-security+5
2 years ago
lockphish preview
Archived

lockphish

GitHubjaykali/lockphish

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone…

information-gatheringmobile-securitypassword-attacks+3
9965 years ago
Nettacker preview

Nettacker

GitHubowasp/nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

information-gatheringnetwork-securitypassword-attacks+7
5.5k8h 16m ago
Cr3dOv3r preview

Cr3dOv3r

GitHubd4vinci/cr3dov3r

Know the dangers of credential reuse attacks.

information-gatheringosintpassword-attacks+1
2.1k8 months ago
pwn_jenkins preview

pwn_jenkins

GitHubgquere/pwn_jenkins

Notes about attacking Jenkins servers

exploitationinformation-gatheringpassword-attacks+6
2.1k2 years ago
tactical-exploitation preview

tactical-exploitation

GitHub0xdea/tactical-exploitation

Modern tactical exploitation toolkit.

exploitationinformation-gatheringosint+8
86618 days ago
ntlm_theft preview

ntlm_theft

GitHubgreenwolf/ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

information-gatheringpassword-attackspenetration-testing+2
1.5k11 months ago
Kraken preview

Kraken

GitHubjasonxtn/kraken

All-in-One Toolkit for BruteForce Attacks

information-gatheringnetwork-securitypassword-attacks+2
1.2k1 year ago
Previous1…16171819Next