Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
119 results
fastgpt-sandbox-audit preview

fastgpt-sandbox-audit

GitHubqianlijaingshan/fastgpt-sandbox-audit

FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

ai-securitycontainer-escapedynamic-analysis-sandboxing+4
3 days ago
ExportDumper preview

ExportDumper

GitHubiilegacyyii/exportdumper

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

binary-analysispayload-developmentred-teaming+1
724 years ago
text4shell-tools preview

text4shell-tools

GitHubjfrog/text4shell-tools
binary-analysiscode-analysisdefensive-tools+3
1043 years ago
YARA_Rules preview

YARA_Rules

GitHubmalgamy/yara_rules
curated-resourcesdefensive-toolsincident-response+3
653 years ago
KPOT-string-decrypter preview

KPOT-string-decrypter

GitHubdodo-sec/kpot-string-decrypter

IDA python scripts to decrypt strings from KPOT and set those as comments

binary-analysisencryption-decryption-toolsmalware-analysis+2
63 years ago
permhash preview

permhash

GitHubgoogle/permhash
android-securitydigital-forensicshash-analysis+3
458 months ago
binsync preview

binsync

GitHubbinsync/binsync

A reversing plugin for cross-decompiler collaboration, built on git.

binary-analysisreverse-engineeringstatic-analysis+1
7438 days ago
bindiff preview

bindiff

GitHubgoogle/bindiff

Quickly find differences and similarities in disassembled code

binary-analysiseducationfirmware-analysis+5
3.1k2 days ago
xortool preview

xortool

GitHubhellman/xortool

A tool to analyze multi-byte xor cipher

binary-analysiscryptographyeducation+3
1.5k1 year ago
NoMoreXOR preview

NoMoreXOR

GitHubhiddenillusion/nomorexor

Tool to help guess a files 256 byte XOR key by using frequency analysis

binary-analysiscryptographyforensics+3
918 years ago
owasp-java-encoder preview

owasp-java-encoder

GitHubowasp/owasp-java-encoder

The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will…

code-analysisdefensive-toolsencryption-decryption-tools+3
5419 months ago
TS_LLMLib preview

TS_LLMLib

GitHubtrustedsec/ts_llmlib
ai-securitybinary-analysiscode-analysis+7
12 months ago
DarunGrim preview

DarunGrim

GitHubohjeongwook/darungrim

A patch analysis tool

binary-analysisfuzzingreverse-engineering+2
3655 years ago
yara preview

yara

GitHubvirustotal/yara

The pattern matching swiss knife

forensicsmalware-analysisstatic-analysis+2
9.8k2 days ago
guarddog preview

guarddog

GitHubdatadog/guarddog

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

code-analysisdevsecopsdynamic-analysis-sandboxing+6
1.2k2 days ago
vulnhuntr preview

vulnhuntr

GitHubprotectai/vulnhuntr

Zero shot vulnerability discovery using LLMs

ai-securitycode-analysispenetration-testing+3
2.7k1 year ago
json-sanitizer preview

json-sanitizer

GitHubowasp/json-sanitizer

Given JSON-like content, The JSON Sanitizer converts it to valid JSON.

code-analysisencryption-decryption-toolsgeneral-purpose-utilities+3
2192 years ago
ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1 preview

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

GitHubshoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1
api-securityauthentication-authorizationcode-analysis+6
1 year ago
Previous1234567Next