Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
111 results
cuckoo3 preview

cuckoo3

GitHubcert-ee/cuckoo3

Open-source automated malware analysis sandbox that runs suspicious files and URLs in isolated VMs and generates detailed behavioral reports.

dynamic-analysis-sandboxingmalware-analysissecurity-virtualization
8179 months ago
AMSIDetection preview

AMSIDetection

GitHubwithsecurelabs/amsidetection

Proof-of-concept tool for detecting AMSI (Antimalware Scan Interface) bypasses and malicious in-memory script activity on Windows endpoints.

defensive-toolsdynamic-analysis-sandboxingmalware-analysis+1
326 years ago
OpenClawMachines preview

OpenClawMachines

GitHubmathaix/openclawmachines

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives

ai-securityauthenticationcloud-security+6
592 months ago
CVE-2026-40897 preview

CVE-2026-40897

GitHubyym8538/cve-2026-40897

Proof-of-concept exploit for CVE-2026-40897, a Math.js expression parser sandbox bypass enabling remote code execution via crafted payloads and a…

exploitationpayload-developmentremote-access-tool+3
11 month ago
ScoutSuite preview

ScoutSuite

GitHubnccgroup/scoutsuite

Multi-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
7.8k2 years ago
DSP preview

DSP

GitHubdockersecurityplayground/dsp

A Microservices-based framework for the study of Network Security and Penetration Test techniques

container-securityeducationlabs-practice+3
6416 months ago
Comment2Shell preview

Comment2Shell

GitHubdeathshotxd/comment2shell

Zero-click pre-auth WordPress CVE-2026-93485 exploit chain: stored XSS in wpautop() escalates to admin-session plugin upload and a self-deleting…

exploitationlabs-practicepayload-development+7
615 days ago
vmsan preview

vmsan

GitHubangelorc/vmsan

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

cloud-infrastructure-securitycontainer-securitydevsecops+3
856 months ago
Wubes preview

Wubes

GitHubnccgroup/wubes

Qubes containerization on Windows

container-securitydefensive-toolssecurity-virtualization
1285 years ago
januscape preview

januscape

GitHubsuominen/januscape

Tracking Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape

security-virtualizationthreat-intelligencevulnerability-analysis
2 months ago
itscape preview

itscape

GitHubsuominen/itscape

Tracking ITScape (CVE-2026-46316), the KVM/arm64 guest-to-host escape

curated-resourcessecurity-virtualizationthreat-intelligence+1
2 months ago
vm2 preview

vm2

GitHubpatriksimek/vm2

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

code-analysisdynamic-analysis-sandboxingsecurity-virtualization+1
4.1k28 days ago
VMwareCloak preview

VMwareCloak

GitHubd4rksystem/vmwarecloak

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

defensive-toolsdynamic-analysis-sandboxingmalware-analysis+1
4501 year ago
rex preview

rex

GitHubrex-rs/rex

Rex is a safe and usable kernel extension framework that allows loading and executing Rust kernel extension programs in the place of eBPF.

dynamic-analysis-sandboxingembedded-systems-securitysecurity-virtualization
5592 months ago
chimera preview

chimera

GitHubpenberg/chimera

Sandbox untrusted code with safe access to the host.

binary-analysiscode-analysisdynamic-analysis-sandboxing+3
13516 days ago
goBox preview

goBox

GitHubnishitm/gobox

GO sandbox to run untrusted code

dynamic-analysis-sandboxingsecurity-virtualizationutilities-frameworks
426 years ago
Hypervisor-From-Scratch preview

Hypervisor-From-Scratch

GitHubsinakarvandi/hypervisor-from-scratch

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

dynamic-analysis-sandboxingeducationlearning-paths-courses+2
2.7k4 months ago
codejail preview

codejail

GitHubopenedx/codejail

Secure code execution

defensive-toolsdynamic-analysis-sandboxingsecurity-virtualization+1
47620h 54m ago
Previous1234567Next