Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
389 results
Cappriciosec-University preview

Cappriciosec-University

GitHubcappricio-securities/cappriciosec-university

A Hacker's E-learning App for Tamil People

api-securityeducationiot-security+6
1
8 days ago
Blind-Trust-CVE-2024-21413-Research preview

Blind-Trust-CVE-2024-21413-Research

GitHubh1ssbl1tz/blind-trust-cve-2024-21413-research

A security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).

educationemail-securityexploitation+7
2 months ago
FakeAuth preview

FakeAuth

GitHubatn1ght/fakeauth

Creates Fake Auth prompt to capture users plaintext passwords

password-attacksphishingred-teaming+1
35 years ago
disclo preview

disclo

GitHubchaelsoo/disclo

Contact Search Engine

crawlerdns-analysisemail-harvesting+6
23 months ago
DefinitelyNotPhishing preview

DefinitelyNotPhishing

GitHubgmh5225/definitelynotphishing

Contains evilginx phislets, gophish templates, burp suite extensions etc.

educationpayload-developmentphishing-tools+3
21 year ago
RP_RecordClip_DLL_Hijack preview

RP_RecordClip_DLL_Hijack

GitHubedubr2020/rp_recordclip_dll_hijack

Remote DLL hijack exploit for Real Player (CVE-2022-32291) using malicious DLLs from WebDAV/SMB shares to achieve code execution.

binary-exploitationexploitationsocial-engineering
23 years ago
SocialEngineering preview

SocialEngineering

GitHubcappricio-securities/socialengineering

SEt framework

impersonation-toolspassword-attacksphishing-tools+2
26 months ago
CVE-2010-1240 preview

CVE-2010-1240

GitHubasepsaepdin/cve-2010-1240

Educational proof-of-concept demonstrating how to embed a Meterpreter backdoor into a PDF file exploiting CVE-2010-1240, with step-by-step Metasploit…

exploit-frameworkspayload-developmentpenetration-testing+3
13 years ago
CVE-2022-30190 preview

CVE-2022-30190

GitHubshndnth/cve-2022-30190

Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.

command-and-controleducationexploitation+8
5 months ago
CVE-2021-24884 preview

CVE-2021-24884

GitHubs1lkys/cve-2021-24884

If an authenticated user who is able to edit Wordpress PHP code in any kind, clicks a malicious link, PHP code can be edited through XSS in…

exploitationpayload-developmentphishing-tools+3
14 years ago
viber-desktop-html-injection preview

viber-desktop-html-injection

GitHubthawkhant/viber-desktop-html-injection

Public writeup for CVE-2025-55996 (Viber Desktop HTML Injection)

educationphishingprivacy+3
11 year ago
blackbird preview

blackbird

GitLabgcabc123/blackbird

An OSINT tool to search for accounts by username in social networks.

curated-resourceseducationinformation-gathering+3
14 years ago
CVE-2022-47132 preview

CVE-2022-47132

GitHubopenxp-research/cve-2022-47132

Academy LMS <= 5.10 CSRF

exploitationpenetration-testingsocial-engineering+2
2 years ago
fluxion preview

fluxion

GitHubjas502n/fluxion

fluxion

password-attackspenetration-testingphishing+4
8 years ago
xll_windows_reverse_shell preview

xll_windows_reverse_shell

GitHubh3x0v3rl0rd/xll_windows_reverse_shell

xll windows reverse shell

command-and-controlexploitationpayload-development+4
1 year ago
WiFi-Pumpkin-deprecated preview
Archived

WiFi-Pumpkin-deprecated

GitHubp0cl4bs/wifi-pumpkin-deprecated

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

captcha-bypasscommand-and-controldns-analysis+9
3.2k6 years ago
SimpleEmailSpoofer preview
Archived

SimpleEmailSpoofer

GitHublunarca/simpleemailspoofer

A simple Python CLI to spoof emails.

email-securityosint-social-engineeringpenetration-testing+3
5634 years ago
CVE-2010-1240 preview
Archived

CVE-2010-1240

GitHub12345qwert123456/cve-2010-1240

Python tool for CVE-2010-1240 research - generates malicious PDFs exploiting Adobe Reader Launch Actions

educationexploitationpayload-generation+3
1 year ago
Previous1…121314…22Next