Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
231 results
SocialFishMobile preview
Archived

SocialFishMobile

GitHubundeadsec/socialfishmobile

📱 🐟 An app to remote control SocialFish.

educationmobile-securityphishing+2
584
3 years ago
sshLooter preview
Archived

sshLooter

GitHubmthbernardes/sshlooter

Script to steal passwords from ssh.

password-crackingpersistence-mechanismspost-exploitation+2
4887 years ago
seeker preview

seeker

GitHubthewhiteh4t/seeker

Accurately Locate Smartphones using Social Engineering

educationinformation-gatheringosint+3
10.0k2 months ago
device-activity-tracker preview

device-activity-tracker

GitHubgommzystudio/device-activity-tracker

A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…

educationexploitationinformation-gathering+7
5.1k8 months ago
BITB preview

BITB

GitHubmrd0x/bitb

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

impersonation-toolsphishingphishing-tools+2
2.9k4 years ago
XLL_Phishing preview

XLL_Phishing

GitHuboctoberfest7/xll_phishing

XLL Phishing Tradecraft

defensive-toolsexploitationpayload-development+7
4404 years ago
Macrome preview

Macrome

GitHubmichaelweber/macrome

Excel Macro Document Reader/Writer for Red Teamers & Analysts

binary-analysisexploitationmalware-analysis+5
5234 years ago
CVE-2021-21123-PoC-Google-Chrome preview

CVE-2021-21123-PoC-Google-Chrome

GitHubpuliczek/cve-2021-21123-poc-google-chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123…

educationexploitationphishing-tools+3
1755 years ago
claude-code-backdoor preview

claude-code-backdoor

GitHubs0ld13rr/claude-code-backdoor

Backdooring Claude Code via hooks in settings.json. Authorized use only!

educationmalware-analysispenetration-testing+4
885 months ago
MOSAIC preview

MOSAIC

GitHubor1un/mosaic

Privacy-first behavioral intelligence framework for multi-platform analysis and sociodynamic research.

educationinformation-gatheringosint+5
438 months ago
CVE-2024-28085 preview

CVE-2024-28085

GitHubskyler-ferrante/cve-2024-28085

WallEscape vulnerability in util-linux

exploitationpassword-attackspost-exploitation+3
552 years ago
camjacking-templates preview

camjacking-templates

GitHubcappricio-securities/camjacking-templates

camjacking templates

defensive-toolseducationlabs-practice+3
46 months ago
DiscoRape preview

DiscoRape

GitHubdaddy-bit/discorape

A selfbot for discord made using Discord.py. It comes with 70+ commands and server nuking features

command-and-controlexploitationpenetration-testing+2
16 years ago
CVE-2026-XXXX-atlassian-email-enumeration preview

CVE-2026-XXXX-atlassian-email-enumeration

GitHubwh4l3x/cve-2026-xxxx-atlassian-email-enumeration

CVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)

email-harvestinginformation-gatheringosint+5
12 months ago
CVE-2019-0708- preview

CVE-2019-0708-

GitHubttsite/cve-2019-0708-

Announces fraud

information-gatheringosintreconnaissance+2
27 years ago
CVE-2024-21413 preview

CVE-2024-21413

GitHubdionissh/cve-2024-21413

Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…

email-securityexploitationpassword-cracking+3
7 months ago
CVE-2022-25257 preview

CVE-2022-25257

GitHubpolling-repo-continua/cve-2022-25257

Proof-of-concept exploit for CVE-2022-25257: CSRF parameter injection in SAS Logon 9.4 enabling warning-message spoofing for phishing attacks.

exploitationphishingsocial-engineering+2
4 years ago
W0nTsEEMe preview

W0nTsEEMe

GitHubspiralbl0ck/w0ntseeme

simple keylogger using python

educationpassword-attacksred-teaming+2
9 years ago
Previous1…10111213Next