Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
61 results
CiLocks preview

CiLocks

GitHubtegal1337/cilocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

android-securityexploit-frameworksinformation-gathering+7
3.1k3 years ago
nishang preview

nishang

GitHubsamratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

command-and-controldata-exfiltrationexploitation+9
10.1k3 years ago
zaproxy preview

zaproxy

GitHubzaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

android-securityapi-securityapi-security-testing+15
15.9k1 day ago
flyphish preview

flyphish

GitHubvirtualsamuraii/flyphish

Deploy a phishing infrastructure on the fly.

cloud-infrastructure-securityemail-securitypenetration-testing+3
791 year ago
loboguara preview

loboguara

GitHubolivsec/loboguara

Cyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…

data-exfiltrationdns-subdomain-enumerationinformation-gathering+6
731 year ago
ExtensionSpoofer preview

ExtensionSpoofer

GitHubhenriksb/extensionspoofer

Spoof file icons and extensions in Windows

ids-ips-evasionimpersonation-toolsmalware-analysis+3
1872 months ago
pwndrop preview

pwndrop

GitHubkgretzky/pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

phishing-toolsred-teamingweb-security
2.3k6 years ago
NtlmRelayToEWS preview

NtlmRelayToEWS

GitHubarno0x/ntlmrelaytoews

ntlm relay attack to Exchange Web Services

email-securityexploitationinformation-gathering+4
3318 years ago
OSweep preview

OSweep

GitHubecstatic-nobel/osweep

Don't Just Search OSINT. Sweep It.

dns-subdomain-enumerationinformation-gatheringmalware-analysis+4
3217 years ago
Storm-Breaker preview

Storm-Breaker

GitHubultrasecurity/storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

information-gatheringosintphishing-tools+2
6.1k1 year ago
CVE-2018-8062 preview

CVE-2018-8062

GitHuboscarakaelvis/cve-2018-8062

Persistent XSS on Comtrend AR-5387un router

exploitationpenetration-testingphishing-tools+3
12 years ago
CVE-2022-1597 preview

CVE-2022-1597

GitHubv35hr4j/cve-2022-1597

The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…

exploitationpenetration-testingphishing-tools+3
44 years ago
tryhackme-moniker-link preview

tryhackme-moniker-link

GitHubyfelipecruvinel/tryhackme-moniker-link

Documentation of my hands-on lab Moniker Link (CVE-2024-21413) completed on TryHackMe.

educationemail-securityexploitation+3
1 month ago
vortex preview

vortex

GitHubklezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

information-gatheringosintpassword-attacks+7
4504 years ago
PackMyPayload preview

PackMyPayload

GitHubmgeeky/packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

container-securityexploit-frameworkspayload-development+3
1.2k3 years ago
overlord preview

overlord

GitHubqsecure-labs/overlord

Python-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…

cloud-securitycommand-and-controlemail-security+3
6394 years ago
fb-phisher-python preview

fb-phisher-python

GitHubarjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

phishingphishing-toolssocial-engineering+1
177 years ago
ALHacking preview

ALHacking

GitHub4lbh4cker/alhacking

Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery,…

information-gatheringosintpassword-attacks+2
1.6k1 year ago
Previous1234Next