Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
708 results
shadowhammer preview

shadowhammer

GitHubwithsecurelabs/shadowhammer

Batch-mode checker for Shadowhammer malware indicators, scanning local or provided MAC addresses against known malicious hashes, with offline support…

defensive-toolsincident-responsemalware-analysis+2
8
7 years ago
copyfail-fix preview

copyfail-fix

GitHubpaulorlima9/copyfail-fix

Quick mitigation and patch script for CVE-2026-31431 (Copy Fail) on Ubuntu/Debian VPS

cloud-infrastructure-securityconfiguration-auditingdevsecops+2
3 months ago
PowerShell-Pro-Obfuscator-Python preview

PowerShell-Pro-Obfuscator-Python

GitHubpelock/powershell-pro-obfuscator-python

Automate PowerShell script source code obfuscation & virtualization with a flexible Web API for Python (pip package).

code-analysisscripting-automationutilities-frameworks
11 month ago
ditto preview

ditto

GitHubairbus-cert/ditto

Obfuscates PowerShell and JavaScript scripts using tree-sitter-based parsing with multiple configurable impostor profiles for stealth, size, and…

code-analysismalware-analysispayload-development+2
4010 days ago
Paranoid-Dirty-Frag-CVE-2026-43284 preview

Paranoid-Dirty-Frag-CVE-2026-43284

GitHubscriptzteam/paranoid-dirty-frag-cve-2026-43284

Paranoid disable Linux IPsec ESP support (esp4/esp6) and RxRPC support.

configuration-auditingdefensive-toolsscripting-automation+1
3 months ago
copy-fail-CVE-2026-31431-mitigation-ansible-playbook preview

copy-fail-CVE-2026-31431-mitigation-ansible-playbook

GitHubmlazzarotto/copy-fail-cve-2026-31431-mitigation-ansible-playbook

An Ansible Playbook to mitigate the vulnerability CVE-2026-31431 on RHEL-based and Debian-based OSes.

cloud-infrastructure-securityconfiguration-auditingdevsecops+2
4 months ago
copy-fail-fix preview

copy-fail-fix

GitHubbryanvine/copy-fail-fix

Per-distro mitigation scripts for CVE-2026-31431 ("Copy Fail") Linux kernel LPE.

configuration-auditingscripting-automationvulnerability-analysis
14 months ago
cve-2026-0300-audit preview

cve-2026-0300-audit

GitHubtailwindrg/cve-2026-0300-audit

Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)

cloud-infrastructure-securityconfiguration-auditingdevsecops+3
4 months ago
cPanel-Fix preview

cPanel-Fix

GitHubmrarianet/cpanel-fix

One security-remediation.sh for CVE-2026-41940 (cPanel), CVE-2026-31431 (kernel "Copy Fail"), CSF, optional domain/proxy cleanup, and optional…

cloud-infrastructure-securityconfiguration-auditingdevsecops+3
14 months ago
copy_fail_mitigation preview

copy_fail_mitigation

GitHubvorkampfer/copy_fail_mitigation

This script will attempt to mitigate the copy_fail attack. CVE-2026-31431

configuration-auditingdefensive-toolsscripting-automation+1
3 months ago
audit-axios preview

audit-axios

GitHubsurri/audit-axios

Scan local repos for vulnerable axios versions (CVE-2026-40175) and patch interactively

code-analysisconfiguration-auditingdevsecops+3
4 months ago
MCPwnfluence preview

MCPwnfluence

GitHubplutosecurity/mcpwnfluence

Information about CVE-2026-27825 & CVE-2026-27826 discovered by Pluto Security and a bash script for identifying vulnerable mcp-atlassian instances…

configuration-auditingdevsecopseducation+3
76 months ago
CVE-2026-24061-GNU-inetutils-Telnet-Detector preview

CVE-2026-24061-GNU-inetutils-Telnet-Detector

GitHubnrnw/cve-2026-24061-gnu-inetutils-telnet-detector

A passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations

configuration-auditingdefensive-toolsdevsecops+2
7 months ago
KSK-ITDK-CVE-2026-21509-Mitigation preview

KSK-ITDK-CVE-2026-21509-Mitigation

GitHubksk-itdk/ksk-itdk-cve-2026-21509-mitigation

Powershell script with Detection and Remediation for CVE-2026-21509

configuration-auditingdefensive-toolsscripting-automation+1
27 months ago
CVE-2026-29000 preview

CVE-2026-29000

GitHubkernelzeroday/cve-2026-29000

Forge JWE-wrapped unsigned JWTs to bypass pac4j-jwt signature verification (CVE-2026-29000) and authenticate as any user; includes Python CLI,…

authentication-authorizationexploitationpayload-generation+5
96 months ago
Search-log4Jvuln-AppScanSTD preview

Search-log4Jvuln-AppScanSTD

GitHubjrocia/search-log4jvuln-appscanstd

This Pwsh script run AppScan Standard scans against a list of web sites (URLs.txt) checking for Log4J (CVE-2021-44228) vulnerability

scripting-automationvulnerability-analysisvulnerability-scanners+1
4 years ago
cve-2026-32746-mitigation preview

cve-2026-32746-mitigation

GitHubdanindiana/cve-2026-32746-mitigation

Automated mitigation tool for CVE-2026-32746, providing atomic rollback, multi-firewall support (UFW, firewalld, nftables, iptables), and…

cloud-infrastructure-securityconfiguration-auditingdefensive-tools+3
5 months ago
PS-CVE-2021-44228 preview

PS-CVE-2021-44228

GitHubarnaudluti/ps-cve-2021-44228

Static detection of vulnerable log4j librairies on Windows servers, members of an AD domain.

cloud-infrastructure-securityconfiguration-auditingdevsecops+2
4 years ago
Previous12…40Next