Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
49 results
xalgorix preview

xalgorix

GitHubxalgord/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

ai-securitydevsecopsdynamic-analysis-sandboxing+7
871
1 day ago
BloodBash preview

BloodBash

GitHubsquidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

cloud-securityconfiguration-auditingidentity-access-management+6
4061 day ago
GhostESP preview

GhostESP

GitHubghostesp-revival/ghostesp

The open-source wireless research platform for ESP32.

bluetooth-securityembedded-systems-securityhardware-hacking+8
8942 days ago
NetExec preview

NetExec

GitHubpennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

information-gatheringnetwork-securitypenetration-testing+2
5.8k4 days ago
ProxyBridge preview

ProxyBridge

GitHubinterceptsuite/proxybridge

Proxifier Alternative to redirect any Windows/MacOS/Linux TCP and UDP traffic to HTTP/Socks5 proxy

network-securitypacket-sniffing-analysispenetration-testing+3
5.8k7 days ago
Kimai-CVE-2026-49865-POC preview

Kimai-CVE-2026-49865-POC

GitHubcyeezy08/kimai-cve-2026-49865-poc

PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0

authenticationexploitationosint+5
20 days ago
OpenMalleableC2 preview

OpenMalleableC2

GitHubcodextf2/openmalleablec2

Open Source Implementation of Cobalt Strike's Malleable C2

command-and-controlexploit-frameworksnetwork-security+3
1071 month ago
nipe preview

nipe

GitHubhtrgouvea/nipe

An engine to make Tor network your default gateway

network-securityosintprivacy+1
2.4k1 month ago
ST3GG preview

ST3GG

GitHubelder-plinius/st3gg

All-in-one steganography suite

ai-securityctfdata-exfiltration+8
1.7k2 months ago
mcp-pwn preview

mcp-pwn

GitHubjf-gondim/mcp-pwn

PoC exploit for CVE-2026-23744 — unauthenticated RCE in MCPJam Inspector via unvalidated serverConfig command injection on /api/mcp/connect, enabling…

command-and-controleducationexploitation+4
2 months ago
social-engineer-toolkit preview

social-engineer-toolkit

GitHubtrustedsec/social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

exploit-frameworksinformation-gatheringpayload-generation+5
15.2k2 months ago
ZeroTrace preview

ZeroTrace

GitLabs_r_e_e_r_a_j/zerotrace

Bash tool that routes all system network traffic through Tor for IP anonymization, with manual/automatic IP rotation and current IP/location display.

osintpenetration-testingprivacy+1
22 months ago
trappsec preview

trappsec

GitHubtrappsec-dev/trappsec

Open-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…

api-securitydefensive-toolsidentity-access-management+5
122 months ago
Red-Teaming-Toolkit preview

Red-Teaming-Toolkit

GitHubinfosecn1nja/red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

command-and-controlcurated-resourceslateral-movement+6
10.6k3 months ago
CVE-2026-39987 preview

CVE-2026-39987

GitHubnxploited/cve-2026-39987

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability

exploitationinformation-gatheringpenetration-testing+4
4 months ago
CVE-2026-39987 preview

CVE-2026-39987

GitHub0xblackash/cve-2026-39987

CVE-2026-39987

command-and-controleducationexploitation+5
4 months ago
FFM preview

FFM

GitHubjusticerage/ffm

Freedom Fighting Mode: open source hacking harness

command-and-controldata-exfiltrationinformation-gathering+6
3484 months ago
kemon preview
Archived

kemon

GitHubdidi/kemon

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

binary-analysisdefensive-toolseducation+6
3985 months ago
Previous123Next