Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

857 results

bfac

mazen160/bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

information-gatheringreconnaissancevulnerability-scanners+1

562

4 years ago

CVE-2025-30208

xuemian168/cve-2025-30208

全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner

exploitationinformation-gatheringreconnaissance+3

481 year ago

kostebek

esecuritylab/kostebek

Automated reconnaissance tool that discovers organization domains by querying trademark databases via Google, Bing, Yahoo, and trademark registries.

information-gatheringosintreconnaissance+1

906 years ago

CVE-2026-23869-Exploit

cybertechajju/cve-2026-23869-exploit

Automated exploit tool for CVE-2026-23869, a remote DoS in React Server Components. Includes PoC, Nuclei template, and scanning scripts for detection…

exploitationpenetration-testingreconnaissance+3

84 months ago

CVE-2026-1357-POC

cybertechajju/cve-2026-1357-poc

Automated exploit tool for CVE-2026-1357, an unauthenticated RCE in WPvivid Backup & Migration. Scans WordPress targets, bypasses WAF/403, uploads a…

data-exfiltrationexploitationpenetration-testing+5

96 months ago

osint-pattern-analyzer

0ggp4r1s/osint-pattern-analyzer

Automated OSINT tool for phone number discovery, pattern detection, and cross-platform correlation.

data-exfiltrationinformation-gatheringosint+3

84 months ago

Stalker

pxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

information-gatheringosintreconnaissance+1

76 years ago

CVE-2023-32315

gibran-abdillah/cve-2023-32315

Automated exploit tool for CVE-2023-32315 authentication bypass vulnerability. Scans single or bulk targets with multiprocessing and automatic login…

exploitationpenetration-testingreconnaissance+2

33 years ago

GrafXploit

wezoomagency/grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised…

exploitationinformation-gatheringpenetration-testing+3

41 year ago

aiohttp-exploit-CVE-2024-23334-certstream

sxyrxyy/aiohttp-exploit-cve-2024-23334-certstream

Automated exploit tool for CVE-2024-23334 that collects domains from certstream, checks for vulnerable Python aiohttp servers, and sends successful…

dns-analysisexploitationinformation-gathering+3

42 years ago

CVE-2023-4220

randynin/cve-2023-4220

Automated exploit tool for CVE-2023-4220, enabling rapid vulnerability exploitation and penetration testing against affected targets.

exploitationpenetration-testingreconnaissance+2

4 months ago

CVE-2021-42237-SiteCore-XP

vesperp/cve-2021-42237-sitecore-xp

Automated exploit tool for CVE-2021-42237 targeting SiteCore XP. Reads target URLs from a file and leverages DNSLog for out-of-band detection.

exploitationpenetration-testingreconnaissance+2

14 years ago

CVE-2021-3019

givemefivw/cve-2021-3019

Automated exploitation tool for CVE-2021-3019 that reads target IPs from a text file and executes the exploit against HTTP endpoints.

exploitationinformation-gatheringreconnaissance+2

5 years ago

Grafxploit

hxlxmj/grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised…

exploitationinformation-gatheringpenetration-testing+3

2 years ago

Archived

3klCon

eslam3kl/3klcon

Automation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated files.

information-gatheringpenetration-testingport-scanning+3

6872 years ago

pentagi

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

ai-securityeducationexploit-frameworks+6

22.3k1 month ago

CVE-2025-0133

inteleon404/cve-2025-0133

Reflected XSS vulnerability found in Palo Alto GlobalProtect Gateway & Portal. Attackers can inject malicious scripts via crafted requests.

exploitationpenetration-testingreconnaissance+3

101 year ago

FinalRecon

thewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

crawlerdns-analysisinformation-gathering+7

3.0k3 months ago

Previous12…48 Next