Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

323 results

zenmap

h3x0v3rl0rd/zenmap

Graphical frontend for Nmap network scanner offering intuitive interface for network discovery, port scanning, and service detection.

information-gatheringnetwork-mappingpenetration-testing+3

5 years ago

AutoPWN-Suite

gamehunterkaan/autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

exploitationinformation-gatheringnetwork-security+5

1.1k13h 25m ago

awesome-bugbounty-tools

vavkamil/awesome-bugbounty-tools

Curated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…

curated-resourcesexploitationfuzzing+5

6.4k17 days ago

reconspider

bhavsec/reconspider

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

dns-analysisemail-harvestinginformation-gathering+5

2.8k5 years ago

heartbleed-masstest

musalbas/heartbleed-masstest

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

information-gatheringnetwork-securitypenetration-testing+3

57111 years ago

kubolt

averonesis/kubolt

Kubolt utility for scanning public kubernetes clusters

cloud-securitycontainer-securitymisconfiguration+3

1075 years ago

rdg_scanner_cve-2020-0609

ruppde/rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)

exploitationinformation-gatheringnetwork-security+3

396 years ago

CloudPulse

yousseflahouifi/cloudpulse

SSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…

cloud-securitydns-subdomain-enumerationinformation-gathering+3

202 years ago

ProxyShell_POC

mithridates1313/proxyshell_poc

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

exploitationpenetration-testingreconnaissance+2

165 years ago

log4j_checker

lfama/log4j_checker

Python3 script for scanning CVE-2021-44228 (Log4shell) vulnerable machines.

exploitationinformation-gatheringpenetration-testing+3

84 years ago

CVE-2023-46805

cbeek-r7/cve-2023-46805

Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices

exploitationinformation-gatheringnetwork-security+2

52 years ago

CVE-2024-24919-Sniper

bigb0x/cve-2024-24919-sniper

CVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning,…

exploitationinformation-gatheringpenetration-testing+3

32 years ago

sql-global-injector

nu11secur1ty/sql-global-injector

Python-based web crawler and SQL injection vulnerability scanner using dork queries. Supports proxy and automated scanning for security testing.

crawlerinformation-gatheringreconnaissance+2

24 years ago

WP-Bricks-Exploit-CVE-2024-25600

cerberusmrxi/wp-bricks-exploit-cve-2024-25600

CVE-2024-25600 - Unauthenticated RCE exploit for WordPress Bricks Builder Theme. Advanced exploitation framework with interactive shell, reverse…

command-and-controlexploitationinformation-gathering+7

13 months ago

CVE-2023-4166

mvpyyds/cve-2023-4166

Python exploit for CVE-2023-4166 targeting Tongda OA. Supports single URL and file-based batch scanning for automated vulnerability verification.

exploitationpenetration-testingreconnaissance+2

13 years ago

CVE-2023-3450

yuanjinyuyuyu/cve-2023-3450

Python exploit script for CVE-2023-3450 targeting web servers identified by FOFA icon hash. Supports single URL and batch file scanning for…

exploitationpenetration-testingreconnaissance+2

13 years ago

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

exrienz/cve-2025-55182-nextjs-scanner-react2shell-poc

Automated detection and exploitation toolkit for CVE-2025-55182, a critical RCE in Next.js React Server Components. Features multi-layered…

command-and-controlexploitationpayload-generation+5

10 months ago

PoC-RCE-CVE-2025-55182

ilixm/poc-rce-cve-2025-55182

Advanced RCE exploitation toolkit for React Server Components vulnerabilities. Features multiple pre-built payloads, Shodan integration for target…

command-and-controlexploitationinformation-gathering+7

10 months ago

Previous12…18 Next