Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
69 results
dromara__hutool_CVE-2018-17297_4-1-1111 preview

dromara__hutool_CVE-2018-17297_4-1-1111

GitHubshoucheng3/dromara__hutool_cve-2018-17297_4-1-1111

Comprehensive Java utility library providing modules for cryptography, HTTP client, caching, JSON, scripting, and captcha generation, simplifying…

captcha-bypasscryptographyencryption-decryption-tools+3
1 year ago
wuzz preview

wuzz

GitHubasciimoo/wuzz

Interactive cli tool for HTTP inspection

general-purpose-utilitiesscripting-automationweb-proxies-interception
10.7k1 month ago
httpstat preview

httpstat

GitHubreorx/httpstat

CLI tool that wraps curl to visualize HTTP request timing breakdowns (DNS, TCP, TLS, server processing) with structured JSON output and SLO threshold…

general-purpose-utilitiesnetwork-securityscripting-automation
6.2k5 months ago
PyFlooder preview

PyFlooder

GitHubd4vinci/pyflooder

A http flood python script that could stop a normal website in 10s

general-purpose-utilitiespenetration-testingscripting-automation+1
4045 years ago
external_curl_AOSP10_r33_CVE-2021-22924 preview

external_curl_AOSP10_r33_CVE-2021-22924

GitHubtrinadh465/external_curl_aosp10_r33_cve-2021-22924

Command-line tool and library for transferring data using URL syntax, supporting various protocols including HTTP, FTP, and more.

general-purpose-utilitiesnetwork-securityscripting-automation+2
4 years ago
Uchihash preview

Uchihash

GitHubn1ght-w0lf/uchihash

A small utility to deal with malware embedded hashes.

binary-analysishash-analysismalware-analysis+2
522 years ago
dumper preview

dumper

GitHubelkirrs/dumper

CLI utility for creating encrypted database backups (PostgreSQL, MySQL, MongoDB) with support for multiple storage backends (SFTP, S3, Azure), SSH…

cloud-securitydata-recoveryencryption-decryption-tools+2
877 months ago
authkeysync preview

authkeysync

GitHubeduardolat/authkeysync

🔐 Lightweight CLI utility designed to synchronize SSH public keys from remote URLs into local authorized_keys files

authenticationauthentication-authorizationcloud-infrastructure-security+3
289 months ago
CVE-2024-3094_xz_check preview

CVE-2024-3094_xz_check

GitHubhackerhermanos/cve-2024-3094_xz_check

This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as…

educationscripting-automationsupply-chain-security+2
92 years ago
-CVE-2024-3094-Vulnerability-Checker-Fixer-Public preview

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

GitHubtitus-soc/-cve-2024-3094-vulnerability-checker-fixer-public

A lightweight utility designed to detect and remediate systems affected by CVE-2024-3094, a critical vulnerability impacting [insert affected…

configuration-auditingdevsecopsincident-response+3
0 years ago
magento2-encryption-key-manager-cli preview

magento2-encryption-key-manager-cli

GitHubwubinworks/magento2-encryption-key-manager-cli

A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.

configuration-auditingcryptographydevsecops+3
1 year ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubyuma-tsushima07/cve-2024-3094

A script to detect if xz is vulnerable - CVE-2024-3094

general-purpose-utilitiesmisconfigurationscripting-automation+2
42 years ago
WebSafeCompiler preview

WebSafeCompiler

GitHubdosx-dev/websafecompiler

A powerfull websites compiler/obfuscator for optimization or intellectual property protection purposes.

encryption-decryption-toolsgeneral-purpose-utilitiesscripting-automation+2
1601 year ago
wp2shell-vulnerability-scanner preview

wp2shell-vulnerability-scanner

GitHubadrees-basheer/wp2shell-vulnerability-scanner

Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across…

information-gatheringreconnaissancescripting-automation+3
1 month ago
CVE-2026-48907 preview

CVE-2026-48907

GitHubnoname-elv/cve-2026-48907

Python CLI that exploits CVE-2026-48907 in Joomla JCE via profile-import upload, verifies shell paths, and opens an interactive command channel on…

exploitationpayload-developmentpenetration-testing+6
5 days ago
bst preview
Archived

bst

GitHube3prom/bst

Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs. 😎

binary-analysispayload-generationpenetration-testing+3
228 years ago
hacker-scripts preview

hacker-scripts

GitHubnarkoz/hacker-scripts

Collection of humorous shell scripts automating personal tasks: texting late-work alerts, scanning emails for keywords, faking sick days, and brewing…

general-purpose-utilitiesscripting-automation
49.8k4 years ago
tmux preview

tmux

GitHubtmux/tmux

Terminal multiplexer for managing multiple shell sessions from a single screen, with session persistence, window splitting, and scriptable…

general-purpose-utilitiesscripting-automationutilities-frameworks
49.3k8 days ago
Previous1234Next