Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

18 results

waf-detector

ammarion/waf-detector

🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and…

defensive-toolsdns-analysisfingerprint-spoofing+8

131

1 month ago

findcdn

cisagov/findcdn

Scans domains to identify which Content Delivery Network (CDN) they use by fingerprinting HTTPS headers, CNAME records, and WHOIS data, with JSON…

dns-analysisfingerprint-spoofinginformation-gathering+4

1233 years ago

crawlee

apify/crawlee

Node.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…

anti-botcrawlerfingerprint-spoofing+6

26.3k20h 44m ago

passer

activecm/passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

defensive-toolsdns-analysisfingerprint-spoofing+6

2668 months ago

metta

uber-common/metta

An information security preparedness tool to do adversarial simulation.

adversarial-attackdefensive-toolseducation+8

1.1k8 years ago

Portspoof

drk1wi/portspoof

Emulates open ports and service signatures across all 65535 TCP ports to slow reconnaissance, confuse scanners, and waste attacker resources with…

defensive-toolsids-ips-evasionnetwork-security+3

2.4k2 months ago

undetected-httpx

michele0303/undetected-httpx

Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.

anti-botfingerprint-spoofingids-ips-evasion+5

2412 days ago

OffensiveLua

hackerhouse-opensource/offensivelua

Offensive Lua.

ids-ips-evasionpassword-attackspayload-development+6

2268 months ago

CVE-2024-21546

digitalsurgn/cve-2024-21546

Automated exploit toolkit and detection template for CVE-2024-21546, an unauthenticated RCE in UniSharp Laravel Filemanager, with WAF evasion and…

code-analysisexploitationpayload-development+4

1 month ago

CVE-2025-54914-PoC

ash1996x/cve-2025-54914-poc

Exploit for CVE-2025-54914 in Azure Networking, creating malicious routes with evasion, persistence, multi-target scanning, and reporting for…

cloud-securityexploitationids-ips-evasion+4

41 year ago

PHP-CGI-INTERNAL-RCE

mananjain61/php-cgi-internal-rce

Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers

dns-analysisexploitationpayload-development+3

1 year ago

thc-ipv6

vanhauser-thc/thc-ipv6

IPv6 attack toolkit

exploitationfuzzingids-ips-evasion+7

1.2k6 months ago

ObfuscatedSharpCollection

flangvik/obfuscatedsharpcollection

Attempt at Obfuscated version of SharpCollection

adversarial-attackcurated-resourceslateral-movement+6

26911 months ago

py-network-scanner

anonymous121029034720384234234/py-network-scanner

Advanced network penetration testing toolkit with SSH vulnerability assessment, CVE-2018-15473 exploitation, stealth brute force capabilities, and…

educationexploitationids-ips-evasion+6

11 year ago

CVE-2026-48908

winrarzipsexploit/cve-2026-48908

Python exploit suite for CVE-2026-48908, an unauthenticated ZIP upload RCE in Joomla SP Page Builder (<=6.6.1), with fingerprinting, batch mode, and…

exploitationpayload-developmentpenetration-testing+5

1 month ago

iberyanbytes

leviathanfromdeepsea/iberyanbytes

PowerShell-based Active Directory enumeration tool for gathering network configuration, domain objects, user sessions, share permissions, and…

information-gatheringpassword-attackspenetration-testing+2

2 years ago

spryCVE-2026-10520

emilliewatson96/sprycve-2026-10520

Python-based exploit module targeting CVE-2026-10520 with automated payload delivery and vulnerability verification for penetration testing…

exploitationpayload-developmentpenetration-testing+3

4 months ago

CVE-2020-2551

hktalent/cve-2020-2551

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

exploitationpayload-developmentpenetration-testing+3

2113 years ago