Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
126 results
WebSecProbe preview

WebSecProbe

GitHubspyboy-productions/websecprobe

Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.

misconfigurationpenetration-testingvulnerability-scanners+2
185
8 months ago
NTLMRecon preview

NTLMRecon

GitHubpraetorian-inc/ntlmrecon

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

authenticationinformation-gatheringpenetration-testing+2
1175 months ago
cdb preview

cdb

GitHubpownjs/cdb

Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and…

debuggersnetwork-mappingpenetration-testing+2
725 years ago
AIDOR preview

AIDOR

GitHubabdulahadthecyber-pixel/aidor

Bash-based automated IDOR vulnerability scanner that detects insecure direct object references by enumerating numerical parameters and analyzing HTTP…

information-gatheringpenetration-testingreconnaissance+2
378 months ago
PyFlooder preview

PyFlooder

GitHubd4vinci/pyflooder

A http flood python script that could stop a normal website in 10s

general-purpose-utilitiespenetration-testingscripting-automation+1
4045 years ago
PortForwarder preview

PortForwarder

GitHublsecqt/portforwarder

TCP Port Forwarding Utility on C

general-purpose-utilitiesids-ips-evasionlateral-movement+4
413 months ago
backdoorme preview

backdoorme

GitHubkkevsterrr/backdoorme

powerful auto-backdooring utility

command-and-controlpayload-generationpenetration-testing+5
7478 years ago
Dracnmap preview

Dracnmap

GitHubscreetsec/dracnmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of…

information-gatheringnetwork-mappingpenetration-testing+2
1.4k8 years ago
ldeep preview

ldeep

GitHubfranc-pentest/ldeep

In-depth ldap enumeration utility

authentication-authorizationconfiguration-auditingdns-analysis+4
6061 month ago
PortBender preview

PortBender

GitHubpraetorian-inc/portbender

TCP Port Redirection Utility

command-and-controlexploitationlateral-movement+4
7875 years ago
aiodnsbrute preview

aiodnsbrute

GitHubblark/aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

dns-subdomain-enumerationinformation-gatheringosint+3
6747 years ago
graphql-cop preview

graphql-cop

GitHubdolevf/graphql-cop

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

api-securityapi-security-testingdynamic-code-analysis+5
69310 months ago
HikvisionExploiter preview

HikvisionExploiter

GitHubtamim1089/hikvisionexploiter

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras…

command-and-controlencryption-decryption-toolsexploitation+8
3849 months ago
solarflare preview

solarflare

GitHubmubix/solarflare

SolarWinds Orion Account Audit / Password Dumping Utility

database-securityencryption-decryption-toolspassword-cracking+1
3522 years ago
pymeta preview

pymeta

GitHubm8sec/pymeta

Utility to download and extract document metadata from an organization. This technique can be used to identify: domains, usernames, software/version…

information-gatheringosintpenetration-testing+1
5252 years ago
nemesis preview

nemesis

GitHublibnet/nemesis

A command-line network packet crafting and injection utility

exploitationfuzzingnetwork-security+2
5272 years ago
ScrapPY preview

ScrapPY

GitHubrosesecurity/scrappy

Python utility that scrapes PDFs to generate targeted wordlists for brute force, forced browsing, and dictionary attacks, with word frequency,…

information-gatheringpassword-attackspenetration-testing+2
22319 days ago
r0ak preview

r0ak

GitHubharryanon/r0ak

Windows command-line utility for reading, writing, and executing kernel-mode code from Administrator context using a font validation execution…

binary-exploitationdebuggersexploitation+5
1088 years ago
Previous1234567Next