Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

490 results

sandy

donctl/sandy

Release of the sandy framework.

android-securitycryptographyencryption-decryption-tools+5

3911 years ago

mass-bruter

opabravo/mass-bruter

Mass bruteforce authentication of common services with common credentials.

network-securitypassword-attackspenetration-testing

552 years ago

AdminSnatcher

syedshehzadgillani/adminsnatcher

Let's Snatch The Admin Panel Of Any Website In Seconds.

information-gatheringpassword-attackspenetration-testing+2

186 years ago

CVE-2025-25198-PoC

groppoxx/cve-2025-25198-poc

PoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.

exploitationpassword-attackspenetration-testing+3

193 months ago

custom-oscp-tooling

wattocyber/custom-oscp-tooling

OSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…

database-securitydns-analysishash-analysis+9

16 days ago

POC-CVE-2014-0166

ettack/poc-cve-2014-0166

POC of CVE-2014-0166 (WordPress cookie forgery vulnerability)

exploitationpassword-attackspenetration-testing+2

512 years ago

exploit-CVE-2024-25723

david-botelho-mariano/exploit-cve-2024-25723

Educational Proof of Concept exploit for CVE-2024-25723, demonstrating unauthorized account takeover in ZenML via API password reset, with version…

educationexploitationpassword-attacks+3

42 years ago

CVE-2018-9995-2

kienquoc102/cve-2018-9995-2

Python exploit for CVE-2018-9995 targeting DVR/NVR devices with login bypass, supporting reconnaissance via Shodan and Zoomeye dorks.

exploitationiot-securitypassword-attacks+3

44 years ago

CVE-2023-23397-PoW

theunknownsoul/cve-2023-23397-pow

Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.

email-securityexploitationpassword-attacks+3

12 years ago

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

mourafuseti/vulneravel-cve-2018-14847---credenciais-extraidas

VULNERAVEL CVE-2018-14847 - CREDENCIAIS EXTRAIDAS MIKROTIK EM PYTHON

exploitationiot-securitynetwork-security+3

13 months ago

CVE-2018-9995_dvr_credentials

abizchi/cve-2018-9995_dvr_credentials

Python exploit for CVE-2018-9995 that retrieves exposed DVR credentials by bypassing authentication on vulnerable web interfaces.

exploitationinformation-gatheringiot-security+3

7 years ago

Moniker-Link-CVE-2024-21413

mqkgithub/moniker-link-cve-2024-21413

Step-by-step walkthrough of exploiting CVE-2024-21413 in Microsoft Outlook to bypass Protected View and leak NTLM credentials via Moniker Links,…

ctfeducationemail-security+5

1 year ago

CVE-2020-12712

0xvedette/cve-2020-12712

Decrypts passwords stored in SOS JobScheduler (S)FTP profiles by exploiting the use of the profile name as the 3DES encryption key, enabling recovery…

cryptographyexploitationpassword-attacks+2

6 years ago