Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
28 results
SkillSpector preview

SkillSpector

GitHubnvidia/skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

ai-securitycode-analysisdevsecops+8
14.8k9h 58m ago
fernflower preview

fernflower

GitHubjetbrains/fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

binary-analysisreverse-engineeringstatic-analysis
4.4k10 days ago
MaliciousBrowserExtensions preview

MaliciousBrowserExtensions

GitHubgherardofiori/maliciousbrowserextensions

This Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…

curated-resourcesdynamic-analysis-sandboxingeducation+4
291 month ago
QLinspector preview

QLinspector

GitHubsynacktiv/qlinspector

Finding Java/C# gadget chains with CodeQL

code-analysisexploitationpayload-development+2
1881 month ago
ioctlance preview

ioctlance

GitHubzeze-zeze/ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers

binary-analysisdynamic-analysis-sandboxingexploit-frameworks+4
4722 months ago
android_application_analyzer preview

android_application_analyzer

GitHubnotsosecure/android_application_analyzer

The tool is used to analyze the content of the android application in local storage.

android-securitydynamic-analysis-sandboxingmobile-app-pentesting+2
1752 months ago
CVE-2025-70330 preview

CVE-2025-70330

GitHubthemalwareguardian/cve-2025-70330

Easy Grade Pro 4.1 file parsing bug used as an educational example to show how beginners can start vulnerability research through reverse engineering.

binary-analysisbinary-exploitationcode-analysis+7
25 months ago
mhf preview

mhf

GitHubstuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

android-securityinformation-gatheringios-security+5
288 months ago
permhash preview

permhash

GitHubgoogle/permhash
android-securitydigital-forensicshash-analysis+3
458 months ago
SSLPinDetect preview

SSLPinDetect

GitHubaancw/sslpindetect

SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps…

android-securitycode-analysismobile-security+4
8711 months ago
CryptoTester preview

CryptoTester

GitHubdemonslay335/cryptotester

A utility for playing with cryptography, geared towards ransomware analysis.

binary-analysiscryptographydynamic-analysis-sandboxing+6
3311 year ago
VulFi preview

VulFi

GitHubaccenture/vulfi

IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.

binary-analysisreverse-engineeringstatic-analysis+1
6701 year ago
copy-as-yara preview

copy-as-yara

GitHubald3ns/copy-as-yara

This is a little plugin to copy disassembly in a way that is usable in YARA rules!

binary-analysismalware-analysisreverse-engineering+1
481 year ago
bluemonday preview

bluemonday

GitHubmicrocosm-cc/bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

api-securitycode-analysisdefensive-tools+3
3.7k1 year ago
file-unpumper preview

file-unpumper

GitHub0x11dfe/file-unpumper

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.

binary-analysismalware-analysisreverse-engineering+1
301 year ago
Fern Pattern Scanner preview

Fern Pattern Scanner

GitLabgitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scanner

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…

code-analysisdevsecopseducation+3
52 years ago
php-malware-finder preview
Archived

php-malware-finder

GitHubjvoisin/php-malware-finder

Detect potentially malicious PHP files

code-analysismalware-analysisstatic-analysis+2
1.5k2 years ago
platform_external_libvpx_v1.8.0_CVE-2023-5217 preview

platform_external_libvpx_v1.8.0_CVE-2023-5217

GitHubtrinadh465/platform_external_libvpx_v1.8.0_cve-2023-5217
binary-analysiscode-analysisdynamic-analysis-sandboxing+3
2 years ago
Previous12Next