Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
354 results
zairo preview

zairo

GitHubiamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

ai-securitycode-analysisdevsecops+3
75 days ago
evm-audit-helpers preview

evm-audit-helpers

GitLabdannydoodlesstory/evm-audit-helpers

Collection of Solidity snippets and Foundry scripts for smart contract security audits

code-analysiscurated-resourcesdevsecops+3
2 days ago
thymeleaf-check preview

thymeleaf-check

GitHubxiaoqimikko/thymeleaf-check

Offline checker for Thymeleaf CVE-2026-40477 / CVE-2026-41901 — tells you which of the two CVSS 9.0 SSTI flaws you are exposed to, and whether your…

configuration-auditingdevsecopsstatic-analysis+2
2 days ago
linux-kernel-codex-harness-v2 preview

linux-kernel-codex-harness-v2

GitHubfoxirain/linux-kernel-codex-harness-v2

Provenance-aware Linux kernel vulnerability research harness used in the investigation of CVE-2026-53075

ai-securitystatic-analysisthreat-intelligence+1
28 days ago
linux-kernel-codex-harness preview

linux-kernel-codex-harness

GitHubfoxirain/linux-kernel-codex-harness

Evidence-driven Linux kernel vulnerability research harness used in the investigation of CVE-2026-31720

ai-securityfuzzingstatic-analysis+1
28 days ago
mlkem-native preview

mlkem-native

GitHubpq-code-package/mlkem-native

Secure, fast, and portable C90 implementation of ML-KEM / FIPS 203

cryptographyembedded-systems-securityhardware-security+1
2281 day ago
CVE-2026-5059-poc preview

CVE-2026-5059-poc

GitHubvenom203020/cve-2026-5059-poc

Proof-of-concept demonstrating command injection in aws-mcp-server via shell=True, with analysis of the vulnerable code and the fix in v1.7.0.

code-analysisexploitationstatic-analysis+2
4 months ago
Se7enSlip preview

Se7enSlip

GitHubshalevo13/se7enslip

A scanner and testter of the CVE-2025-11001 of 7-zip

curated-resourceseducationexploitation+3
410 months ago
log4jhound preview

log4jhound

GitHubmebibite/log4jhound

Created after the disclosure of CVE-2021-44228. Bash script that detects Log4j occurrences in your projects and systems, allowing you to get insight…

code-analysisdevsecopsstatic-analysis+2
4 years ago
CVE-2026-35414 preview

CVE-2026-35414

GitHubkillercd/cve-2026-35414

Demonstrates a proof-of-concept for CVE-2026-35414, showing a vulnerable and fixed version of SSH principal matching logic to illustrate the flaw.

code-analysisexploitationstatic-analysis+2
14 months ago
codeql-sample-polkit preview

codeql-sample-polkit

GitHubhohn/codeql-sample-polkit

All stages of exploring the polkit CVE-2021-4034 using codeql

code-analysiseducationpapers-research+2
24 years ago
CVE-2026-21852-PoC preview

CVE-2026-21852-PoC

GitHubatiilla/cve-2026-21852-poc

Educational demo of three Claude Code vulnerabilities (hooks bypass, MCP injection, API key exfiltration) with attacker server, MITM proxy, and…

ai-securityeducationexploitation+5
246 months ago
CVE-2026-51416 preview

CVE-2026-51416

GitHubrenio-wow/cve-2026-51416

Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.

code-analysisstatic-analysisvulnerability-analysis+1
4 months ago
A-potential-Denial-of-Service-issue-in-protobuf-java preview

A-potential-Denial-of-Service-issue-in-protobuf-java

GitHubmario-kart-felix/a-potential-denial-of-service-issue-in-protobuf-java

Detailed analysis of CVE-2021-22569, a high-severity denial-of-service vulnerability in protobuf-java, including affected versions, patched versions,…

curated-resourceseducationstatic-analysis+1
4 years ago
semgrep-rules preview

semgrep-rules

GitHubtrailofbits/semgrep-rules

Collection of Semgrep rules for static code analysis, detecting security vulnerabilities, and enforcing secure coding practices across multiple…

code-analysisdevsecopsmisconfiguration+2
5254 months ago
not-slithering-anywhere preview

not-slithering-anywhere

GitHubtrailofbits/not-slithering-anywhere

The Python Version of our Not Go-ing Anywhere Vulnerable Application

dynamic-analysis-sandboxingeducationlabs-practice+3
112 years ago
class-dump preview

class-dump

GitHubnygard/class-dump

Generate Objective-C headers from Mach-O files.

binary-analysisios-securityreverse-engineering+1
3.6k4 years ago
static-analysis preview

static-analysis

GitHubanalysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

code-analysiscurated-resourcesdevsecops+5
14.8k7 days ago
Previous12…20Next