Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
200 results
DocPlz preview

DocPlz

GitHubsaadahla/docplz

Documents Exfiltration project for fun and educational purposes

data-exfiltrationpost-exploitationred-teaming
1432 years ago
DSCourier_BOF preview

DSCourier_BOF

GitHuboctoberfest7/dscourier_bof

BOF POC of the DSCourier project / invoking WinGet via COM

command-and-controlexploitationlateral-movement+5
903 months ago
NebulaPulsar preview

NebulaPulsar

GitHubiss4cf0ng/nebulapulsar

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

dynamic-code-analysiseducationencryption-decryption-tools+7
471 month ago
exploits preview

exploits

GitHubchacka0101/exploits

Exploits project Hacking Command Center

exploitationexploit-frameworkspenetration-testing+2
512 years ago
Android-Imgui-Template preview

Android-Imgui-Template

GitHubtraitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityeducationexploitation+4
2120 days ago
php-bypass-disable-functions preview

php-bypass-disable-functions

GitHubirsl/php-bypass-disable-functions

Demo project how to bypass the disable_functions security control of PHP on Linux

binary-exploitationexploitationpost-exploitation+3
277 years ago
Stealth-Kid-RAT preview

Stealth-Kid-RAT

GitHubartbitrage/stealth-kid-rat

Stealth Kid RAT (SKR) is an open-source multi-platform Remote Access Trojan (RAT) written in C#. Released under MIT license. The SKR project is fully…

command-and-controleducationpayload-development+3
244 years ago
CVE-2026-37065 preview

CVE-2026-37065

GitHubjfs-jfs/cve-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion

exploitationpenetration-testingred-teaming+2
2 months ago
Zero-Day-Legacy preview

Zero-Day-Legacy

GitHubayham-megdadi/zero-day-legacy

A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS,…

ctfeducationlabs-practice+6
11 month ago
MegaQuagga_Pentesting_Report preview

MegaQuagga_Pentesting_Report

GitHubaktia1/megaquagga_pentesting_report

Web application penetration testing project targeting a WordPress environment. Includes exploitation of CVE-2019-9978, reverse shell execution,…

educationexploitationpenetration-testing+5
3 months ago
Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution preview

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

GitHubtolu12wani/demonstration-of-cve-2023-38831-via-reverse-shell-execution

This project demonstrates a simulated exploitation of the WinRAR vulnerability CVE-2023-38831 to execute a reverse shell. The purpose of this task…

educationexploitationpayload-generation+3
1 year ago
SharpHound3 preview
Archived

SharpHound3

GitHubbloodhoundad/sharphound3

C# Data Collector for the BloodHound Project, Version 3

information-gatheringosintpenetration-testing+2
5564 years ago
Vulmap preview
Archived

Vulmap

GitHubvulmon/vulmap

Vulmap Online Local Vulnerability Scanners Project

exploitationinformation-gatheringpenetration-testing+4
9783 years ago
ESP32-DIV preview

ESP32-DIV

GitHubcifertech/esp32-div

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

bluetooth-securityeducationembedded-systems-security+8
3.8k14 days ago
malleable-c2 preview

malleable-c2

GitHubthreatexpress/malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

command-and-controlcurated-resourceseducation+4
1.8k2 years ago
coffeeMiner preview

coffeeMiner

GitHubarnaucube/coffeeminer

collaborative (mitm) cryptocurrency mining pool in wifi networks

educationpenetration-testingred-teaming+1
1.1k8 years ago
Medusa preview

Medusa

GitHubascotbe/medusa

🐈Medusa是一个红队武器库平台,目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能,持续开发中

dns-analysisexploit-frameworkspayload-generation+4
2.2k3 years ago
rogue-jndi preview

rogue-jndi

GitHubveracode-research/rogue-jndi

A malicious LDAP server for JNDI injection attacks

ctfeducationexploitation+4
1.1k2 years ago
Previous1…567…12Next