Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

125 results

cve-2026-98432-mitigation

zombiepm/cve-2026-98432-mitigation

Interim nftables mitigation for CVE-2026-98432, automatic rollback and Russian administrator guide. Not a kernel patch.

configuration-auditingdefensive-toolsincident-response+4

4 days ago

cve-2026-99999-audit

quaerendir/cve-2026-99999-audit

Read-only Bash audit script that triages CVE-2026-99999 (PwnEscape) Linux kernel IPv4 checksum OOB write, checking patch status, module reachability,…

configuration-auditingcontainer-securitydefensive-tools+6

319 days ago

kpatch-alma-cve-2026-99999

nsrg-fmlorg/kpatch-alma-cve-2026-99999

kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8/9 GA kernels

container-securitydefensive-toolsdevsecops+4

7 days ago

cve-2026-99999-scanner

sqzer-x/cve-2026-99999-scanner

Checks whether a Linux system is affected by CVE-2026-99999 (PwnEscape) and prints or applies the distribution-specific kernel fix

configuration-auditingdefensive-toolsincident-response+3

116 days ago

cve-2026-98432-audit

quaerendir/cve-2026-98432-audit

Read-only bash audit script that triages CVE-2026-98432, a Linux kernel IPv4 TCP use-after-free, by checking kernel changelogs, distro fix matrices,…

configuration-auditingdefensive-toolsincident-response+4

17 days ago

netviser-linux-security-auditor

maxigentr/netviser-linux-security-auditor

Read-only, agentless Linux kernel security configuration auditor (local & SSH). Initial focus: TCP migration / MPTCP checks for CVE-2026-98432.

configuration-auditingdefensive-toolsincident-response+5

6 days ago

cve-2026-98432-validation-mitigation

akamai/cve-2026-98432-validation-mitigation

Read-only patch-state and exposure check for CVE-2026-98432 (Linux kernel IPv4 TCP use-after-free, CVSS 9.8), with opt-in interim mitigation and…

configuration-auditingdefensive-toolsincident-response+4

65 days ago

mitigate-cve-2026-98432

matthew-hollick/mitigate-cve-2026-98432

Puppet module that deploys a temporary UFW/iptables rule dropping IPv4 TCP packets with IPv4 options to mitigate CVE-2026-98432 until vendor kernel…

configuration-auditingdefensive-toolsdevsecops+4

3 days ago

cve-2026-98432-mitigation

zenjabba/cve-2026-98432-mitigation

Temporary nftables mitigation for CVE-2026-98432 (Linux IPv4 TCP IP-options use-after-free)

configuration-auditingdefensive-toolsincident-response+5

1 day ago

netscaler-pitscaler-cve-2026-88772-check

completetech-security/netscaler-pitscaler-cve-2026-88772-check

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML…

configuration-auditingdefensive-toolsmisconfiguration+5

10 days ago

VulnClaw

netw0rknoob/vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

ai-securitycommand-and-controlctf+9

3.9k6 days ago

synology-nas-cli

aa22396584/synology-nas-cli

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; hand it to…

ai-securityauthenticationconfiguration-auditing+9

14 days ago

ARTEX

baarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9

85510 days ago

darc

jarryshaw/darc

Darkweb crawler that uses requests and Selenium workers to fetch pages, capture headers and cookies, extract links, and save rendered screenshots for…

crawlerinformation-gatheringosint+4

24026 days ago