Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
126 results
cve-2018-1002105 preview
Archived

cve-2018-1002105

GitHubgravitational/cve-2018-1002105

Kubernetes cluster vulnerability scanner that detects CVE-2018-1002105 by testing for unauthenticated API access and privilege escalation via…

cloud-securitycontainer-securityexploitation+3
1917 years ago
CVE-2026-48907 preview

CVE-2026-48907

GitHubnoname-elv/cve-2026-48907

Python CLI that exploits CVE-2026-48907 in Joomla JCE via profile-import upload, verifies shell paths, and opens an interactive command channel on…

exploitationpayload-developmentpenetration-testing+6
5 days ago
bst preview
Archived

bst

GitHube3prom/bst

Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs. 😎

binary-analysispayload-generationpenetration-testing+3
228 years ago
check-cve-2019-19781 preview
Archived

check-cve-2019-19781

GitHubcisagov/check-cve-2019-19781

Test a host for susceptibility to CVE-2019-19781

exploitationpenetration-testingvulnerability-analysis+2
1095 years ago
goldig preview
Archived

goldig

GitLabrtfmkiesel/goldig

Execute commands on Windows via malicious TXT DNS records

command-and-controldns-analysisexploitation+3
3 years ago
socks5 preview

socks5

GitHubwzshiming/socks5

Socks5/Socks5h server and client. Full TCP/Bind/UDP and IPv4/IPv6 support

general-purpose-utilitiesnetwork-securitypenetration-testing+2
1304 days ago
kali-docker preview

kali-docker

GitLabkalilinux/build-scripts/kali-docker

Kali Linux Docker

general-purpose-utilitiespenetration-testingscripting-automation+2
1004 months ago
sshpass-win32 preview

sshpass-win32

GitHubxhcoding/sshpass-win32

Windows version of http://sourceforge.net/projects/sshpass/

authenticationgeneral-purpose-utilitiespassword-attacks+1
1543 months ago
RemoteAssistance-Cpp preview

RemoteAssistance-Cpp

GitHubdydtjr1128/remoteassistance-cpp

[WIP]RemoteAssistance like TeamViewer(C++)

general-purpose-utilitiespenetration-testingred-teaming+2
626 years ago
kali-packer preview

kali-packer

GitLabkalilinux/build-scripts/kali-packer

Create and configure lightweight, reproducible, and portable development environments Kali's HashiCorp Packer configurations to create Kali…

general-purpose-utilitiespenetration-testingsecurity-virtualization
475 months ago
faraday-client preview

faraday-client

GitHubinfobyte/faraday-client

GTK client of FaradaySEC

general-purpose-utilitiespenetration-testingutilities-frameworks+1
63 years ago
CVE-2023-38545 preview

CVE-2023-38545

GitHubbcdannyboy/cve-2023-38545

A proof of concept for testing CVE-2023-38545 against local curl

exploitationgeneral-purpose-utilitiesnetwork-security+3
42 years ago
CVE-2026-43500 preview

CVE-2026-43500

GitHubattaattaatta/cve-2026-43500

CVE-2026-43500 / CVE-2026-31431 / CVE-2026-43284 golang hotfix

exploitationgeneral-purpose-utilitiespenetration-testing+1
2 months ago
gogs preview

gogs

GitHubbackline-playground/gogs

Fork of gogs/gogs for reachability benchmark testing (CVE-2024-45337)

exploitationgeneral-purpose-utilitiespenetration-testing+1
5 months ago
CVE-2020-16898_Workaround preview

CVE-2020-16898_Workaround

GitHubcpo-eh/cve-2020-16898_workaround

PowerShell Script Workaround for VCE-220-16898 Vulnerability

exploitationgeneral-purpose-utilitiespenetration-testing+2
5 years ago
apache_kylin preview

apache_kylin

GitHubshanika04/apache_kylin

CVE-2020-1937

exploitationgeneral-purpose-utilitiespenetration-testing+1
5 years ago
bash-3.2-fixed-CVE-2014-6271 preview

bash-3.2-fixed-CVE-2014-6271

GitHubu20024804/bash-3.2-fixed-cve-2014-6271

Patched GNU Bash 3.2 with a fix for CVE-2014-6271 (Shellshock). Provides a standard POSIX shell with command-line editing, job control, and history…

exploitationgeneral-purpose-utilitiespenetration-testing+2
11 years ago
hide-me preview
Archived

hide-me

GitHubandrei-zgirvaci/hide-me

Mac and hostname random changer

general-purpose-utilitiesinformation-gatheringpenetration-testing+4
448 years ago
Previous1234567Next