Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
124 results
Scan_WinRAR preview

Scan_WinRAR

GitHubwinkler-winsen/scan_winrar

Scan for WinRAR files affected to CVE-2023-40477

exploitationgeneral-purpose-utilitiesscripting-automation+2
3 years ago
PowerShell-Log4J-Scanner preview
Archived

PowerShell-Log4J-Scanner

GitHubdansi/powershell-log4j-scanner

can find, analyse and patch Log4J files because of CVE-2021-44228, CVE-2021-45046

configuration-auditinggeneral-purpose-utilitiesscripting-automation+2
4 years ago
EventLogging preview
Archived

EventLogging

GitHubblackhillsinfosec/eventlogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

configuration-auditingdefensive-toolsincident-response+3
4911 year ago
chaostoolkit preview

chaostoolkit

GitHubchaostoolkit/chaostoolkit

Chaos Engineering Toolkit & Orchestration for Developers

chaos-engineeringscripting-automationutilities-frameworks
2.0k27 days ago
4nonimizer preview

4nonimizer

GitHubhackplayers/4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers…

dns-analysisprivacyscripting-automation
6457 years ago
scant3r preview

scant3r

GitHubmindpatch/scant3r

Module-based web vulnerability scanner and bug bounty automation framework with built-in XSS, SSTI, SSRF, and Firebase detection engines. Designed to…

penetration-testingscripting-automationvulnerability-scanners+2
6847 days ago
Halcyon-IDE preview

Halcyon-IDE

GitHubs4n7h0/halcyon-ide

First IDE for Nmap Script (NSE) Development.

network-securityscripting-automationutilities-frameworks+1
3606 years ago
goWAPT preview

goWAPT

GitHubdzonerzy/gowapt

Go Web Application Penetration Test

fuzzingpenetration-testingscripting-automation+4
3451 year ago
fix-react2shell-next preview

fix-react2shell-next

GitHubvercel-labs/fix-react2shell-next

One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.

code-analysisdevsecopsscripting-automation+3
4028 months ago
generator-burp-extension preview

generator-burp-extension

GitHubrsrdesarrollo/generator-burp-extension

Everything you need about Burp Extension Generation

penetration-testingscripting-automationutilities-frameworks+1
1583 years ago
Kali-Setup preview

Kali-Setup

GitHubraikia/kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

penetration-testingscripting-automationutilities-frameworks
1905 years ago
kali-vm preview

kali-vm

GitLabkalilinux/build-scripts/kali-vm

Kali Linux VM images build script

penetration-testingscripting-automationsecurity-virtualization
921 month ago
safetext preview

safetext

GitHubgoogle/safetext

Go library for safe YAML and shell generation, using syntax-aware templates to detect and block injection attacks via annotations for trusted data.

defensive-toolsdevsecopsscripting-automation+1
1515 months ago
nginx-mitigate-log4shell preview

nginx-mitigate-log4shell

GitHubinfiniroot/nginx-mitigate-log4shell

Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script

defensive-toolsmisconfigurationscripting-automation+2
384 years ago
uncle-spufus preview

uncle-spufus

GitHubphoscoder/uncle-spufus

A tool that automates MAC address and hostname spoofing

fingerprint-spoofingprivacyscripting-automation+1
627 years ago
anubis-fetch preview

anubis-fetch

GitHubfzakaria/anubis-fetch

Like curl, but it gets past Anubis and Cloudflare bot-walls.

anti-botfingerprint-spoofingscripting-automation+3
321 month ago
CVE-2021-22005- preview

CVE-2021-22005-

GitHub5gstudent/cve-2021-22005-

CVE-2021-22005批量验证python脚本

exploitationpenetration-testingscripting-automation+2
134 years ago
Fix-CVE-2021-44228 preview

Fix-CVE-2021-44228

GitHubalexandreheroux/fix-cve-2021-44228

Apply class remove process from ear/war/jar/zip archive, see https://logging.apache.org/log4j/2.x/

misconfigurationscripting-automationsupply-chain-security+2
64 years ago
Previous1234567Next