Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

36 results

Argus

dozermx/argus

Multi-phase reconnaissance and attack-surface scanner that maps domains, IPs, ASNs, cloud assets, and CVEs into a knowledge graph with CVSS scoring…

api-securityfuzzinginformation-gathering+9

5 months ago

prismsec

azmisyahrul/prismsec

Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting

dns-subdomain-enumerationpenetration-testingpenetration-testing-frameworks+7

2 days ago

Log4ShellAuditor

c00ln3t/log4shellauditor

An autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and…

devsecopsexploitationlabs-practice+6

17 days ago

VulnHub-DC1-Writeup

prapul1/vulnhub-dc1-writeup

VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password…

ctfeducationexploitation+9

11 month ago

peeko

b3rito/peeko

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

command-and-controldata-exfiltrationinformation-gathering+7

2331 year ago

phantomrecon

l33tdawg/phantomrecon

PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered…

dns-analysisexploitationinformation-gathering+6

36 months ago

JavaDeserialization

etocheney/javadeserialization

针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器

exploitationnetwork-mappingpayload-generation+3

97 years ago

topera

toperaproject/topera

IPv6 analysis tool: the other side

ids-ips-evasionnetwork-securitypenetration-testing+3

3612 years ago

CVE-2023-27163-InternalProber

samh4cks/cve-2023-27163-internalprober

A tool to perform port scanning using vulnerable Request-Baskets

exploitationpenetration-testingport-scanning+3

52 years ago

CVE-2014-4210-SSRF-PORTSCANNER-POC

unmanarc/cve-2014-4210-ssrf-portscanner-poc

CVE-2014-4210 SSRF PORTSCANNER PoC

educationexploitationport-scanning+3

36 years ago

SSRFX

nonenotnull/ssrfx

CVE-2014-4210+Redis未授权访问

exploitationpenetration-testingport-scanning+3

989 years ago

Exploit_CVE-2023-27163

j0ey17/exploit_cve-2023-27163

Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.

exploitationpenetration-testingport-scanning+3

11 year ago

CVE-2025-64459-hunter

purehate/cve-2025-64459-hunter

CVE-2025-64459-hunter

exploitationnetwork-mappingport-scanning+3

6 months ago

WebLogic-SSRF_CVE-2014-4210

nhpt/weblogic-ssrf_cve-2014-4210

Weblogic SearchPublicRegistries SSRF(CVE-2014-4210) Exploit Script based on Python3

exploitationnetwork-mappingport-scanning+3

115 years ago

CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer

theopaid/cve-2023-27163-request-baskets-local-ports-bruteforcer

PoC and internal port brute-forcer for CVE-2023-27163

exploitationport-scanningreconnaissance+2

11 year ago

CVE-2023-27163-exploit

jeanback1/cve-2023-27163-exploit

cloud-securityexploitationport-scanning+3

3 months ago

xerosploit

lionsec/xerosploit

Efficient and advanced man in the middle framework

exploitationinformation-gatheringnetwork-security+4

2.2k3 years ago

pentest-mcp

dmontgomery40/pentest-mcp

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR,…

exploitationfuzzingnetwork-mapping+8

1425 months ago

Previous12 Next