Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
45 results
CVE-2026-41940 preview

CVE-2026-41940

GitHubsenyx122/cve-2026-41940

A security research tool for detecting and analyzing cPanel/WHM services and their authentication behavior. Designed for authorized testing and…

educationinformation-gatheringpenetration-testing+3
7
4 months ago
cve-2026-1731-scanner preview

cve-2026-1731-scanner

GitHubcybrdude/cve-2026-1731-scanner

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

defensive-toolseducationinformation-gathering+5
46 months ago
CVE-2026-24061-Scanner preview

CVE-2026-24061-Scanner

GitHubxsanflip/cve-2026-24061-scanner

Bash-based scanner for CVE-2026-24061 that performs subnet reconnaissance, banner grabbing, and active exploitation checks against GNU Inetutils…

educationexploitationnetwork-security+4
7 months ago
UPnP-Pentest-Toolkit preview

UPnP-Pentest-Toolkit

GitHubnccgroup/upnp-pentest-toolkit

UPnP Pentest Toolkit for Windows

exploitationhardware-iot-securitynetwork-security+5
26111 years ago
cyanide preview

cyanide

GitHubhorizon3ai/cyanide

Automated NTLM relay attack tool combining Responder poisoning with Impacket relay and secretsdump for credential capture, hash relaying, and lateral…

exploitationinformation-gatheringlateral-movement+6
161 month ago
rayhunter preview

rayhunter

GitHubefforg/rayhunter

Rust tool to detect cell site simulators on an orbic mobile hotspot

defensive-toolseducationembedded-systems-security+9
5.8k2 days ago
zarp preview

zarp

GitHubhatriot/zarp

Network Attack Tool

dns-analysisexploitationnetwork-security+5
1.5k4 years ago
Conveigh preview

Conveigh

GitHubkevin-robertson/conveigh

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

dns-analysisintrusion-detectionnetwork-security+3
9910 years ago
wp_CVE-2020-35489_checker preview

wp_CVE-2020-35489_checker

GitHubreneoliveirajr/wp_cve-2020-35489_checker

WordPress Sites Vulnerability Checker for CVE-2020-35489 - "Educational Use Only"

educationexploitationinformation-gathering+3
132 years ago
RSC-Infra-Scanner preview

RSC-Infra-Scanner

GitHubvyvivekyadav04/rsc-infra-scanner

This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I…

educationinformation-gatheringreconnaissance+2
9 months ago
ChromSploit-Framework preview

ChromSploit-Framework

GitHubleviticus-triage/chromsploit-framework

Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397 |

command-and-controleducationexploit-frameworks+4
177 months ago
CVE-2026-41940-Linux preview

CVE-2026-41940-Linux

GitHubwillygailo/cve-2026-41940-linux

⚠️ DISCLAIMER: This tool is intended for authorized penetration testing and educational purposes only. Using this tool against systems without…

educationexploitationpenetration-testing+3
23 months ago
CVE-2025-55182-advanced-scanner- preview

CVE-2025-55182-advanced-scanner-

GitHubzack0x01/cve-2025-55182-advanced-scanner-

Command-line scanner for detecting and exploiting CVE-2025-55182 (React Server Components RCE) in Next.js applications. Supports custom command…

educationexploitationpenetration-testing+3
2829 months ago
cve-2024-24919 preview

cve-2024-24919

GitHubsatchhacker/cve-2024-24919

Shell script that tests for CVE-2024-24919 by sending curl requests to specified IPs/domains, intended for educational vulnerability assessment.

educationexploitationreconnaissance+2
2 years ago
CVE-2026-8206 preview

CVE-2026-8206

GitHubjenderal92/cve-2026-8206

Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6).

educationexploitationinformation-gathering+5
33 months ago
CyberStrike preview

CyberStrike

GitHubcyberstrikeus/cyberstrike

Autonomous AI red team agent for penetration testing with 13+ specialized agents, 120+ OWASP test cases, and MITRE ATT&CK integration. Supports 15+…

ai-securitycloud-securityeducation+9
2.6k20h 16m ago
whatsapp-census preview

whatsapp-census

GitHubsbaresearch/whatsapp-census

Research tool for enumerating WhatsApp user accounts via phone number probing, demonstrating large-scale enumeration vulnerabilities and their…

educationinformation-gatheringmobile-security+4
4049 months ago
CVE-2018-9995-ModifiedByGwolfs preview

CVE-2018-9995-ModifiedByGwolfs

GitHubgwolfs/cve-2018-9995-modifiedbygwolfs

Educational exploit tool for CVE-2018-9995 targeting DVR credentials, with Shodan-based target discovery and automated credential retrieval.

educationexploitationinformation-gathering+3
28 years ago
Previous123Next