Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
453 results
vx-underground-wordlist preview

vx-underground-wordlist

GitHub0xsyr0/vx-underground-wordlist

Wordlist to crack .zip-file password

curated-resourcespassword-attackspassword-cracking
2034 years ago
CVE-2019-17662 preview

CVE-2019-17662

GitHubwhokilleddb/cve-2019-17662

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

exploitationinformation-gatheringpassword-attacks+2
24 years ago
CVE-2019-17662-Exploit preview

CVE-2019-17662-Exploit

GitHubrajendrakumaryadav/cve-2019-17662-exploit

Exploit For CVE-2019-17662

exploitationinformation-gatheringpassword-attacks+2
14 years ago
trident preview
Archived

trident

GitHubpraetorian-inc/trident

automated password spraying tool

authenticationcloud-securitypassword-attacks+3
1485 years ago
xpl-ModernWMS-CVE-2024-57698 preview

xpl-ModernWMS-CVE-2024-57698

GitHubrodolfomarianocy/xpl-modernwms-cve-2024-57698

It is possible to view the MD5 hash of the admin password and other attributes without authentication, even after initial setup and password change.…

exploitationinformation-gatheringmisconfiguration+3
1 year ago
hashID preview

hashID

GitHubpsypanda/hashid

Software to identify the different types of hashes -

forensicshash-analysisinformation-gathering+3
1.5k11 years ago
CVE-2024-29868 preview

CVE-2024-29868

GitHubdevisions/cve-2024-29868

Proof of concept of CVE-2024-29868 affecting Apache StreamPipes from 0.69.0 through 0.93.0

cryptographyexploitationpassword-attacks+3
12 years ago
SharpSploit preview

SharpSploit

GitHubcobbr/sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

command-and-controlexploitationinformation-gathering+9
1.9k5 years ago
iOSRestrictionBruteForce preview

iOSRestrictionBruteForce

GitHubthehappydinoa/iosrestrictionbruteforce

Crack iOS Restriction Passcodes with Python

forensicsios-securitymobile-security+1
3762 years ago
youzer preview

youzer

GitHublorentzenman/youzer

Fake User Generator for Active Directory Environments

password-attackspenetration-testingutilities-frameworks
1567 years ago
PasswordFilter preview

PasswordFilter

GitHub3gstudent/passwordfilter

2 ways of Password Filter DLL to record the plaintext password

password-attackspenetration-testing
655 years ago
CVE-2023-22960 preview

CVE-2023-22960

GitHubt3l3machus/cve-2023-22960

This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server (interface) of more than…

exploitationpassword-attackspenetration-testing+1
913 years ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubzen-kun04/cve-2025-49132

A script that gives you the credentials of a Pterodactyl panel vulnerable to CVE-2025-49132

exploitationinformation-gatheringpassword-attacks+3
171 year ago
kcmd preview

kcmd

Bitbucketaseemjakhar/kcmd

Kankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…

cryptographyexploitationhardware-iot-security+4
11 years ago
CVE-2024-42849 preview

CVE-2024-42849

GitHubnjmbb8/cve-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

exploitationpassword-attackspenetration-testing+2
2 years ago
violent-python3 preview

violent-python3

GitHubeonraider/violent-python3

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

bluetooth-securityeducationexploitation+8
1.1k1 month ago
gorilla preview

gorilla

GitHubandreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

crawlerinformation-gatheringpassword-attacks+1
3917 months ago
CVE-2023-7028 preview

CVE-2023-7028

GitHubvozec/cve-2023-7028

This repository presents a proof-of-concept of CVE-2023-7028

exploitationpassword-attackspenetration-testing+3
2452 years ago
Previous1…456…26Next