Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2850 results
AlienTec-Recon-Tool preview

AlienTec-Recon-Tool

GitHubalientec1908/alientec-recon-tool

AlienTec-Recon-Tool

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6
1
9 months ago
erlvulnscan preview

erlvulnscan

GitHubtechnion/erlvulnscan

Concurrent network scanner for CVE-2015-1635

information-gatheringnetwork-securitypenetration-testing+3
108 years ago
Awesome-Cellular-Hacking preview

Awesome-Cellular-Hacking

GitHubw00t3k/awesome-cellular-hacking

Awesome-Cellular-Hacking

curated-resourceseducationexploitation+6
4.0k24 days ago
Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation preview

Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation

GitHubrhimavanth32-max/metasploitable2-reconnaissance-and-unrealircd-backdoor-exploitation

End-to-end recon and exploitation of a known backdoor (CVE-2010-2075) on Metasploitable2 using Nmap and Metasploit.

ctfeducationexploitation+7
10 days ago
Antecursor preview

Antecursor

GitLabantecursor/antecursor

Autonomous and modular system for network based information gathering and exploitation. WEB interface here: https://antecursor.fr/ More info…

command-and-controlexploitationhardware-iot-security+5
57 years ago
AutoPWN-Suite preview

AutoPWN-Suite

GitHubgamehunterkaan/autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

exploitationinformation-gatheringnetwork-security+5
1.1k2 months ago
GitLabSniper preview

GitLabSniper

GitHubynsmroztas/gitlabsniper

Single-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…

data-exfiltrationexploitationinformation-gathering+6
710 days ago
go-pillage-registries preview

go-pillage-registries

GitHubnccgroup/go-pillage-registries

Pentester-focused Docker registry tool to enumerate and pull images

cloud-securitycontainer-securityinformation-gathering+3
1136 years ago
pentesting-multitool preview

pentesting-multitool

GitHubffmancera/pentesting-multitool

Different utility scripts for pentesting and hacking.

dns-analysisfuzzinginformation-gathering+4
478 years ago
ProHunter preview

ProHunter

GitHubxueboqiu/prohunter

Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…

anomaly-detectioninformation-gatheringmachine-learning+3
129 months ago
Penetration-Testing-Assessment-23-04-2026 preview

Penetration-Testing-Assessment-23-04-2026

GitHubadmin2099/penetration-testing-assessment-23-04-2026

Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…

educationexploitationexploit-frameworks+9
3 months ago
S2-Reaper preview

S2-Reaper

GitHubgsfish/s2-reaper

Google search crawler that collects URLs vulnerable to Apache Struts2 S2-045 (CVE-2017-5638) using configurable keywords and proxy support.

crawlerexploitationinformation-gathering+3
9 years ago
redamon preview

redamon

GitHubsamugit83/redamon

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…

ai-securityexploit-frameworkslateral-movement+8
2.5k1 day ago
PowerZure preview

PowerZure

GitHubhausec/powerzure

PowerShell framework to assess Azure security

cloud-securityexploitationpenetration-testing+1
1.3k11 months ago
metta preview

metta

GitHububer-common/metta

An information security preparedness tool to do adversarial simulation.

adversarial-attackdefensive-toolseducation+8
1.1k8 years ago
scallion preview

scallion

GitHublachesis/scallion

GPU-based Onion Hash generator

cryptographyinformation-gatheringpassword-cracking+1
1.3k5 years ago
Filibuster preview

Filibuster

GitHubsubinacls/filibuster

Automated reconnaissance and information-gathering tool for penetration testing, designed to enumerate subdomains, endpoints, and network services.

information-gatheringosintpenetration-testing+3
279 years ago
CVE-2024-25600 preview

CVE-2024-25600

GitHubr0otk3r/cve-2024-25600

Python-based exploit for CVE-2024-25600 targeting Bricks Builder WordPress plugin RCE. Automates nonce extraction, payload injection, and arbitrary…

exploitationinformation-gatheringpayload-development+3
1 year ago
Previous12…100Next