Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
158 results
CVE-2019-14287 preview

CVE-2019-14287

GitHubh3x0v3rl0rd/cve-2019-14287

Shell script to detect CVE-2019-14287 sudo privilege escalation vulnerability. Scans systems for the flaw and reports affected configurations.

exploitationinformation-gatheringpenetration-testing+3
1 year ago
linset preview

linset

GitHubvk496/linset

Evil Twin Attack Bash script

educationphishingred-teaming+3
57612 years ago
create_ap preview
Archived

create_ap

GitHuboblique/create_ap

[NOT MAINTAINED] This script creates a NATed or Bridged WiFi Access Point.

network-securitypenetration-testingred-teaming+3
4.5k2 years ago
decode-spam-headers preview

decode-spam-headers

GitHubmgeeky/decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

email-securityinformation-gatheringlog-analysis+2
7006 months ago
secretsdump.py preview

secretsdump.py

GitHubfin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

data-exfiltrationpassword-attackspenetration-testing+2
2593 years ago
Spoof_AnyMail preview

Spoof_AnyMail

GitHubhackerxphantom/spoof_anymail

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

email-securityimpersonation-toolspenetration-testing+3
1854 years ago
Nac_Bypass_Agent preview

Nac_Bypass_Agent

GitHubalperenugurlu/nac_bypass_agent

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

educationids-ips-evasionimpersonation-tools+5
733 years ago
cve-2023-46747 preview

cve-2023-46747

GitHubvidura2/cve-2023-46747

Exploit script for CVE-2023-46747 (F5 BIG-IP TMUI RCE) enabling unauthenticated user creation, token retrieval, and remote command execution on…

exploitationpenetration-testingred-teaming+3
21 year ago
CVE-2020-7384 preview

CVE-2020-7384

GitHubcarsonshaffer/cve-2020-7384

Bash exploit script for CVE-2020-7384, a remote code execution vulnerability in Apache NiFi, with improved usability and quality-of-life enhancements.

exploitationpayload-generationpenetration-testing+3
3 years ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubl0n3m4n/cve-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

exploitationnetwork-securitypayload-development+6
1112 years ago
PowerExfil preview

PowerExfil

GitHub1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

data-exfiltrationdns-analysiseducation+3
966 years ago
google_socks preview
Archived

google_socks

GitHublukebaggett/google_socks

A proof of concept demonstrating the use of Google Drive for command and control.

cloud-securitycommand-and-controldata-exfiltration+3
888 years ago
CVE-2026-1731 preview

CVE-2026-1731

GitHubwin3zz/cve-2026-1731

CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash arithmetic…

exploitationpayload-generationpenetration-testing+3
366 months ago
CVE-2026-41940 preview

CVE-2026-41940

GitHub0xyur1/cve-2026-41940

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)

authenticationauthentication-authorizationexploitation+6
103 months ago
CVE-2025-59712_CVE-2025-59713 preview

CVE-2025-59712_CVE-2025-59713

GitHubsynacktiv/cve-2025-59712_cve-2025-59713

Snipe-IT PoC exploit for CVE-2025-59712 and CVE-2025-59713

exploitationpayload-developmentpenetration-testing+3
211 months ago
CVE-2022-1227_Exploit preview

CVE-2022-1227_Exploit

GitHublouisliunova/cve-2022-1227_exploit

A script for exploiting CVE-2022-1227

container-escapeexploitationpenetration-testing+3
13 years ago
CVE-2024-24919 preview

CVE-2024-24919

GitHubyn1337/cve-2024-24919

Mass scanner for CVE-2024-24919

exploitationinformation-gatheringpenetration-testing+3
2 years ago
HTB-NanoCorp-CVE-2024-0670 preview

HTB-NanoCorp-CVE-2024-0670

GitHubdfdxarjy/htb-nanocorp-cve-2024-0670

PowerShell exploit for CVE-2024-0670, abusing CheckMK Agent MSI repair to escalate from low-privileged user to SYSTEM on Windows targets. Designed…

binary-exploitationctfeducation+5
2 months ago
Previous12…9Next