Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
57 results
JQueryingU preview

JQueryingU

GitHubsamsayen/jqueryingu

Valid JQuery that profiles the system and returns info to the server in a fake analytics GET request

information-gatheringosint-social-engineeringphishing-tools+2
7 years ago
decode-spam-headers preview

decode-spam-headers

GitHubmgeeky/decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

email-securityinformation-gatheringlog-analysis+2
7006 months ago
InfraHunter preview

InfraHunter

GitHubmontysecurity/infrahunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

information-gatheringosintphishing-tools+2
642 years ago
crime-mapper preview

crime-mapper

GitHubmr-r3b00t/crime-mapper

A tool for mapping cyber crime

digital-forensicsemail-securityinformation-gathering+3
2427 months ago
Ios-Safari-Mallicous-Extension-Example preview

Ios-Safari-Mallicous-Extension-Example

GitHubspiralbl0ck/ios-safari-mallicous-extension-example

Example on how to injection(currently under work) of keylogger js through Safari Extension(that part done)

exploitationinformation-gatheringios-security+3
2 years ago
SocialEngineering-Templates preview

SocialEngineering-Templates

GitHubcappricio-securities/socialengineering-templates

a SET framework templates

information-gatheringpenetration-testing-frameworksphishing-tools+2
6 months ago
fbht preview

fbht

GitHubchinoogawa/fbht

Facebook Hacking Tool

information-gatheringosintpassword-attacks+3
1.6k10 years ago
htshells preview

htshells

GitHubwireghoul/htshells

Self contained htaccess shells and attacks

exploitationinformation-gatheringpayload-generation+5
1.1k4 years ago
CVE-2026-XXXX-atlassian-email-enumeration preview

CVE-2026-XXXX-atlassian-email-enumeration

GitHubwh4l3x/cve-2026-xxxx-atlassian-email-enumeration

CVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)

email-harvestinginformation-gatheringosint+5
12 months ago
PRISM-AP preview

PRISM-AP

GitHub1n3/prism-ap

An automated Wireless RogueAP MITM attack framework.

dns-analysisinformation-gatheringpacket-sniffing-analysis+6
1917 years ago
power-pwn preview

power-pwn

GitHubmbrg/power-pwn

An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents

ai-securitycloud-securityinformation-gathering+8
1.2k8 months ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubxaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

email-securityexploitationinformation-gathering+5
7722 years ago
CVE-2025-26318 preview

CVE-2025-26318

GitHubfrozenka/cve-2025-26318

POC CVE-2025-26318

exploitationinformation-gatheringphishing-tools+3
51 year ago
toxssin preview

toxssin

GitHubt3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

exploitationinformation-gatheringpayload-generation+4
1.4k1 year ago
AzureRedOps preview

AzureRedOps

GitHubmr-un1k0d3r/azureredops

Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

authenticationcloud-securityexploitation+8
1842 months ago
FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp preview

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

GitHubfuckjsonp/fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

information-gatheringosintphishing-tools+3
4094 years ago
CVE-2023-08-21-exploit preview

CVE-2023-08-21-exploit

GitHubamirzargham/cve-2023-08-21-exploit

Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS

data-exfiltrationexploitationinformation-gathering+3
12 years ago
Microsoft-Edge-Information-Disclosure preview

Microsoft-Edge-Information-Disclosure

GitHubabsholi7ly/microsoft-edge-information-disclosure

CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

data-exfiltrationexploitationinformation-gathering+3
172 years ago
Previous1234Next