Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
21 results
Shuffle preview

Shuffle

GitHubshuffle/shuffle

Open-source security orchestration, automation, and response (SOAR) platform with a visual workflow editor, prebuilt security app integrations, and…

defensive-toolsincident-responseioc-management+3
2.4k
1 day ago
zeek2es preview

zeek2es

GitHubcorelight/zeek2es

A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further…

log-analysisnetwork-securityscripting-automation+1
404 years ago
fix-react2shell-next preview

fix-react2shell-next

GitHubvercel-labs/fix-react2shell-next

One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.

code-analysisdevsecopsscripting-automation+3
4029 months ago
Glass preview

Glass

GitHubazw413/glass

Glass - a fast and free IDA Pro alternative

android-securitybinary-analysisdebuggers+7
19517 days ago
renef-skills preview

renef-skills

GitHubvichhka-git/renef-skills

Agent Skill for operating renef.io — Android ARM64 dynamic instrumentation: hook native/Java, patch memory, trace syscalls, bypass SSL pinning/root…

android-securitybinary-analysisctf+9
152 months ago
appsandbox preview

appsandbox

GitHubjamesstringer90/appsandbox

Easily create full virtual machines that are sandboxed for development or computer use models.

devsecopsdynamic-analysis-sandboxingscripting-automation+1
6662 months ago
AndroSH preview

AndroSH

GitHubahmed-alnassif/androsh

AndroSH No-Root Multi-Distro Linux on Android via Shizuku/ADB - Run Arch, Fedora, Alpine, Debian, Ubuntu, Kali, Void, Manjaro, OpenSUSE & Chimera…

android-securitycontainer-securityeducation+6
24112 days ago
friman preview

friman

GitHubthelicato/friman

Frida version management tool

android-securityios-securitymobile-security+3
164 months ago
CVE-2025-29927-Testing preview

CVE-2025-29927-Testing

GitHubtheresafewconors/cve-2025-29927-testing

PowerShell script to test if a web app is vulnerable to CVE-2025-29927

exploitationinformation-gatheringpenetration-testing+3
21 year ago
DedSec preview

DedSec

GitHubdedsec1121fk/dedsec

Educational Android (Termux) toolkit for learning penetration testing, OSINT, social engineering, and network security through hands-on scripts,…

android-securityctfeducation+8
1.0k17 days ago
frida-ui preview

frida-ui

GitHubadityatelange/frida-ui

Interact with Frida devices, processes, and scripts directly from your browser.

android-securitydebuggersdynamic-analysis-sandboxing+5
2436 months ago
tap-ducky preview

tap-ducky

GitHubiodn/tap-ducky

Turns any rooted phone into the legendary USB Rubber Ducky. Android USB HID Keystroke Injector

android-securityexploitationhardware-hacking+5
1663 months ago
zafrida-ui preview

zafrida-ui

GitHubyilongmd/zafrida-ui

A Frida UI tool window inside PyCharm / JetBrains IDEs.

android-securitydebuggersdynamic-analysis-sandboxing+6
869 days ago
zclaw preview

zclaw

GitHubtnm/zclaw

Your personal AI assistant at all-in 888KiB (~35KB in app code). Running on an ESP32. GPIO, cron, custom tools, memory, and more.

ai-securityembedded-systems-securitygeneral-purpose-utilities+3
2.2k3 months ago
sandbox-agent preview

sandbox-agent

GitHubrivet-dev/sandbox-agent

Run Coding Agents in Sandboxes. Control Them Over HTTP. Supports Claude Code, Codex, OpenCode, and Amp.

api-securitycontainer-securitydevsecops+3
1.6k2 months ago
HingeSDK preview

HingeSDK

GitHubreedgraff/hingesdk

Hinge Dating App SDK for python for lonely bored SWEs

crawlerdata-exfiltrationinformation-gathering+4
1169 months ago
neo preview

neo

GitHub4ier/neo

Turn any web app into an API. Chrome extension captures browser traffic, auto-generates schemas, lets AI replay APIs directly. No official API needed.

ai-securityapi-securitycrawler+8
7514 months ago
simvyn preview

simvyn

GitHubpranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

android-securitydatabase-securitydebuggers+9
3531 month ago
Previous12Next