Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
347 results
shellnoob preview

shellnoob

GitHubreyammer/shellnoob

A shellcode writing toolkit

binary-analysisdebuggerseducation+6
6951 year ago
Bountystrike-sh preview

Bountystrike-sh

GitHubbountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2913 years ago
project-black preview

project-black

GitHubc0rv4x/project-black

Pentest/BugBounty progress control with scanning modules

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2796 years ago
chomp-scan preview

chomp-scan

GitHubsolomonsklash/chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

dns-analysisinformation-gatheringpenetration-testing+6
3946 years ago
binary-ninja-headless-mcp preview

binary-ninja-headless-mcp

GitHubmrphrazer/binary-ninja-headless-mcp

Headless Binary Ninja MCP server — giving AI agents deep reverse-engineering capabilities via 180 tools.

ai-assisted-reversingbinary-analysisdebuggers+5
2373 months ago
aardwolf preview

aardwolf

GitHubskelsec/aardwolf

Asynchronous RDP client for Python (headless)

authenticationinformation-gatheringlateral-movement+5
23912 days ago
polyshell preview

polyshell

GitHubllamasoft/polyshell

A Bash/Batch/PowerShell polyglot!

payload-developmentpayload-generationpenetration-testing+2
2253 years ago
psobf preview

psobf

GitHubtaurusomar/psobf

PowerShell Obfuscator

educationids-ips-evasionpayload-development+4
2525 months ago
tap-ducky preview

tap-ducky

GitHubiodn/tap-ducky

Turns any rooted phone into the legendary USB Rubber Ducky. Android USB HID Keystroke Injector

android-securityexploitationhardware-hacking+5
1573 months ago
rewerse-engineering preview

rewerse-engineering

GitHubbytesizedmarius/rewerse-engineering

Rewe API reverse engineering in Go

api-securitycryptographyeducation+3
8421 days ago
vba2clr preview

vba2clr

GitHubmed0x2e/vba2clr

Running .NET from VBA

adversarial-attackpayload-developmentpost-exploitation+2
1473 years ago
cygor preview

cygor

GitHubtjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7
882 months ago
PSTrojanFile preview

PSTrojanFile

GitHubhyp3rlinx/pstrojanfile

Unfixed Windows PowerShell Filename Code Execution POC

ctfeducationexploitation+6
422 years ago
PwnBox-Kali preview

PwnBox-Kali

GitHubblacksnufkin/pwnbox-kali

Bash Script to automate the process of setting up a new Kali Linux virtual machine to look a like HTB PwnBox

educationgeneral-purpose-utilitiespenetration-testing+3
214 years ago
SleuthQL preview

SleuthQL

GitHubianxtianxt/sleuthql

SleuthQL是基于python3所开发的一款,用于批量爬行站点可能存在sql的地址。并且可以配合burp+sqlmap进行批量注入。 对比sqlmap手动单线程一个一个注入点的去识别,方便了很多。

penetration-testingreconnaissancescripting-automation+4
166 years ago
liferay-ga4-rce-research preview

liferay-ga4-rce-research

GitHubdinosn/liferay-ga4-rce-research

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…

dynamic-analysis-sandboxingexploitationpapers-research+6
61 month ago
ElectronVulnerableVersion preview

ElectronVulnerableVersion

GitHubgtgalaxi/electronvulnerableversion

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129

binary-analysisinformation-gatheringreconnaissance+3
72 years ago
cpanel-cve-2026-41940 preview

cpanel-cve-2026-41940

GitHubmahfuzreham/cpanel-cve-2026-41940

cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script

configuration-auditingdefensive-toolsforensics+5
22 months ago
Previous1…121314…20Next