Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
82 results
gvisor preview

gvisor

GitHubgoogle/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

cloud-infrastructure-securitycloud-securitycontainer-escape+4
19.8k
5h 5m ago
vulnrichment preview

vulnrichment

GitHubcisagov/vulnrichment

A repo to conduct vulnerability enrichment.

curated-resourcesdefensive-toolsinformation-gathering+5
8778h 55m ago
Win11Debloat preview

Win11Debloat

GitHubraphire/win11debloat

A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to…

general-purpose-utilitiesprivacyscripting-automation+1
61.3k14h 22m ago
kata-containers preview

kata-containers

GitHubkata-containers/kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

cloud-infrastructure-securitycloud-securitycontainer-escape+4
9.1k14h 30m ago
firecracker preview

firecracker

GitHubfirecracker-microvm/firecracker

Secure and fast microVMs for serverless computing.

cloud-infrastructure-securitycloud-securitycontainer-security+3
37.7k21h 35m ago
CubeSandbox preview

CubeSandbox

GitHubtencentcloud/cubesandbox

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

ai-securitycloud-infrastructure-securitycloud-security+4
13.1k0 days ago
Knowledge-Base preview

Knowledge-Base

GitHubslowmist/knowledge-base

Curated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…

ai-securitycryptographycurated-resources+7
4.6k1 day ago
igvm preview

igvm

GitHubmicrosoft/igvm

Rust library and format specification for creating and loading Independent Guest Virtual Machine (IGVM) files, supporting hardware-isolated VMs with…

cloud-securityembedded-systems-securityfirmware-analysis+2
1571 day ago
pentoo-overlay preview

pentoo-overlay

GitHubpentoo/pentoo-overlay

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

defensive-toolsexploit-frameworkshardware-security+7
3851 day ago
qubes-core-admin preview

qubes-core-admin

GitHubqubesos/qubes-core-admin

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

defensive-toolssecurity-virtualizationutilities-frameworks
1482 days ago
n8n-databricks-path-join preview

n8n-databricks-path-join

GitHubabraxas/n8n-databricks-path-join

Proof-of-concept for an n8n path-traversal (CWE-22) in Databricks nodes: unauthenticated webhook input escapes the Genie path to leak workspace PAT…

exploitationinformation-gatheringlabs-practice+4
2 days ago
moodle-grades-feedback-idor preview

moodle-grades-feedback-idor

GitHubabraxas/moodle-grades-feedback-idor

Moodle 5.2.3 - High - Remote - IDOR - core_grades_get_feedback skips separate-groups checks

exploitationinformation-gatheringlabs-practice+5
12 days ago
kafka-connect-filestream-win preview

kafka-connect-filestream-win

GitHubabraxas/kafka-connect-filestream-win

Kafka Connect 4.3.1 - High - Windows FileStream classpath leftover - unauth file read/write

exploitationinformation-gatheringlabs-practice+5
12 days ago
gitea-restore-file-open preview

gitea-restore-file-open

GitHubabraxas/gitea-restore-file-open

Proof-of-concept for a Gitea restore-repo file:// local file inclusion (CWE-73) that copies symlink targets outside an untrusted dump into release…

exploitationinformation-gatheringlabs-practice+4
2 days ago
CVE-2026-52782 preview

CVE-2026-52782

GitHubabraxas/cve-2026-52782

Reproduction pack and PoC script for CVE-2026-52782, an authenticated IDOR in OpenProject project storage settings that hijacks Nextcloud/OneDrive…

exploitationinformation-gatheringlabs-practice+5
2 days ago
cakephp-smtp-crlf preview

cakephp-smtp-crlf

GitHubabraxas/cakephp-smtp-crlf

CakePHP 5.4.2 - High - Remote - Header injection - SmtpTransport lone LF leftover of GHSA-2qh5

email-securityexploitationpenetration-testing+4
2 days ago
secureboot_objects preview

secureboot_objects

GitHubmicrosoft/secureboot_objects

Microsoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…

configuration-auditingembedded-systems-securityfirmware-analysis+3
2973 days ago
codejail preview

codejail

GitHubopenedx/codejail

Secure code execution

defensive-toolsdynamic-analysis-sandboxingsecurity-virtualization+1
4773 days ago
Previous12345Next