Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
257 results
exploits preview

exploits

GitHub0xdea/exploits

Public exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel,…

binary-exploitationdatabase-securityexploitation+3
676
10 months ago
Nosql-Exploitation-Framework preview

Nosql-Exploitation-Framework

GitHubtorque59/nosql-exploitation-framework

A Python Framework For NoSQL Scanning and Exploitation

database-securityexploitationinformation-gathering+3
6048 years ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubxaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

email-securityexploitationinformation-gathering+5
7662 years ago
PenBox preview

PenBox

GitHubx3omdax/penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

exploitationfuzzinginformation-gathering+8
53410 years ago
gorilla preview

gorilla

GitHubandreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

crawlerinformation-gatheringpassword-attacks+1
3907 days ago
Wordpress-XMLRPC-Brute-Force-Exploit preview

Wordpress-XMLRPC-Brute-Force-Exploit

GitHub1n3/wordpress-xmlrpc-brute-force-exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield

exploitationinformation-gatheringpassword-attacks+3
4991 year ago
cookie_crimes preview

cookie_crimes

GitHubdefaultnamehere/cookie_crimes

Read local Chrome cookies without root or decrypting

information-gatheringpassword-attackspost-exploitation+1
6436 years ago
ldapnomnom preview

ldapnomnom

GitHublkarlslund/ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

authenticationinformation-gatheringpassword-attacks+1
1.1k1 year ago
credmap preview

credmap

GitHublightos/credmap

The Credential Mapper

information-gatheringosintpassword-attacks
4558 years ago
PowerShell-Red-Team preview

PowerShell-Red-Team

GitHubtobor88/powershell-red-team

Collection of PowerShell functions a Red Teamer may use in an engagement

information-gatheringlateral-movementpassword-attacks+3
5512 years ago
pre2k preview

pre2k

GitHubgarrettfoster13/pre2k

A tool to query for the existence of pre-windows 2000 computer objects.

exploitationinformation-gatheringpassword-attacks+3
3925 days ago
Homework-of-Python preview

Homework-of-Python

GitHub3gstudent/homework-of-python

Python codes of my blog.

exploitationinformation-gatheringpassword-attacks+5
4123 years ago
brutus preview

brutus

GitHubpraetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

authenticationexploitationinformation-gathering+7
3077 days ago
debian-ssh preview

debian-ssh

GitHubg0tmi1k/debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

cryptographyexploitationinformation-gathering+5
4109 years ago
SauronEye preview

SauronEye

GitHubvivami/sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

information-gatheringosintpassword-attacks+2
7655 years ago
Go365 preview

Go365

GitHuboptiv/go365

An Office365 User Attack Tool

authenticationinformation-gatheringpassword-attacks+1
6524 years ago
quasibot preview

quasibot

GitHubsmaash/quasibot

complex webshell manager, quasi-http botnet.

command-and-controlexploitationinformation-gathering+6
28411 years ago
RedTeam_toolkit preview

RedTeam_toolkit

GitHubsignorrayan/redteam_toolkit

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

exploitationinformation-gatheringpassword-attacks+5
5723 years ago
Previous1…345…15Next