Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
192 results
CVE-2024-7456scripts preview

CVE-2024-7456scripts

GitHub77philly/cve-2024-7456scripts

Bash and Node.js scripts to automate SQL injection exploitation against vulnerable web applications, targeting CVE-2024-7456.

exploitationpenetration-testingscripting-automation+2
2 years ago
iconvfix preview

iconvfix

GitHubabsolutedesignltd/iconvfix

Bash script to patch for CVE-2024-2961

general-purpose-utilitiesmisconfigurationscripting-automation+1
2 years ago
CVE-2023-2982 preview

CVE-2023-2982

GitHubwshinkle/cve-2023-2982

Python exploit script for CVE-2023-2982, packaged in a Docker container for automated deployment and testing against vulnerable targets.

container-securityexploitationscripting-automation+2
2 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubmustafa1986/cve-2024-3094

Python script to detect vulnerable xz-utils versions and automatically download and install a stable, patched version to mitigate CVE-2024-3094.

general-purpose-utilitiesscripting-automationvulnerability-analysis+1
2 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubfractal-tess/cve-2024-3094

Bash script to detect and remediate vulnerable xz-utils versions (5.6.0/5.6.1) by replacing them with a stable, uncompromised build from source.

general-purpose-utilitiesscripting-automationsupply-chain-security+2
2 years ago
remediate_cesa_2019_2091 preview

remediate_cesa_2019_2091

GitHubhpcprofessional/remediate_cesa_2019_2091

Remediation task for CVE-2018-15686, CVE-2018-16866, and CVE-2018-16888 affecting SystemD in EL7

cloud-infrastructure-securityconfiguration-auditingdevsecops+3
6 years ago
aws-log4j-mitigations preview

aws-log4j-mitigations

GitHubmarkuman/aws-log4j-mitigations

CVE-2021-44228 log4j mitigation using aws wafv2 with ansible

cloud-securityconfiguration-auditingdevsecops+3
4 years ago
GHOSTCHECK-cve-2015-0235 preview

GHOSTCHECK-cve-2015-0235

GitHubchayim/ghostcheck-cve-2015-0235

A check for GHOST; cve-2015-0235

network-securitypenetration-testingscripting-automation+2
6 years ago
CVE-2021-3438 preview

CVE-2021-3438

GitHubtobiass1402/cve-2021-3438

Detection and remediation for CVE-2021-3438 with Powershell

configuration-auditingmisconfigurationscripting-automation+2
5 years ago
trident preview
Archived

trident

GitHubpraetorian-inc/trident

automated password spraying tool

authenticationcloud-securitypassword-attacks+3
1485 years ago
XSpear preview
Archived

XSpear

GitHubhahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

dynamic-analysis-sandboxingfuzzinginformation-gathering+8
1.4k8 months ago
WindowsFirewallRuleset preview
Archived

WindowsFirewallRuleset

GitHubmetablaster/windowsfirewallruleset

PowerShell scripts to automatically create rules for Windows firewall

configuration-auditingnetwork-securityscripting-automation
1791 year ago
PowerShell-Log4J-Scanner preview
Archived

PowerShell-Log4J-Scanner

GitHubdansi/powershell-log4j-scanner

can find, analyse and patch Log4J files because of CVE-2021-44228, CVE-2021-45046

configuration-auditinggeneral-purpose-utilitiesscripting-automation+2
4 years ago
ansible-role-cve preview
Archived

ansible-role-cve

GitHubpgporada/ansible-role-cve

Mitigates CVE-2016-5195 aka DirtyCOW

cloud-securityconfiguration-auditingdevsecops+2
1010 years ago
flipperzero preview

flipperzero

GitHubzarcolio/flipperzero

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

data-exfiltrationeducationhardware-hacking+7
5111 year ago
ghidra preview

ghidra

GitHubnationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

ai-assisted-reversingandroid-securitybinary-analysis+17
71.1k2 days ago
artemis preview

artemis

GitHubgoogle/artemis

Natural-language Android automation agent that drives real devices via ADB, captures Logcat and screenshots, and exposes an MCP server for AI IDEs…

ai-securityandroid-securitydynamic-analysis-sandboxing+5
16.1k1 month ago
simvyn preview

simvyn

GitHubpranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

android-securitydatabase-securitydebuggers+9
3444 days ago
Previous1…91011Next