Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
140 results
Apkx-Hunter preview

Apkx-Hunter

GitHubsyscallx-18113/apkx-hunter

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

android-securityinformation-gatheringmachine-learning+7
94
12 days ago
smalien preview

smalien

GitHubh1nayoshi/smalien

Information flow analysis tool for Android applications

android-securitydynamic-analysis-sandboxinginformation-gathering+2
125 years ago
droidcarve preview

droidcarve

GitHubdarioi/droidcarve

Android Reverse Engineering Framework

android-securitybinary-analysismobile-security+2
13 years ago
disrobe preview

disrobe

GitHub1-3-7/disrobe

Rust CLI suite that statically decompiles, deobfuscates, and unpacks native code, bytecode, scripts, firmware, and app packages across 15+ ecosystems…

android-securitybinary-analysisfirmware-analysis+4
1137 days ago
mauidll preview

mauidll

GitHubbishopfox/mauidll

Extract the managed (.NET) assemblies out of a MAUI Android assembly store.

android-securitybinary-analysisdynamic-code-analysis+4
3 days ago
AndroBugs_Framework preview
Archived

AndroBugs_Framework

GitHubandrobugs/androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android…

android-securitycode-analysismobile-app-pentesting+3
1.2k7 years ago
vesta preview

vesta

GitHubkvesta/vesta

A static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing

cloud-securityconfiguration-auditingcontainer-security+3
2051 year ago
detectXSSlib preview

detectXSSlib

GitHubgwroblew/detectxsslib

C++ library for detecting cross-site scripting (XSS) vulnerabilities in URLs through pattern analysis, with server modules and command-line tools for…

code-analysispenetration-testingstatic-analysis+3
3113 years ago
x-stream__xstream_CVE-2013-7285_1-4-6 preview

x-stream__xstream_CVE-2013-7285_1-4-6

GitHubshoucheng3/x-stream__xstream_cve-2013-7285_1-4-6

Java XML serialization library with a focus on the CVE-2013-7285 deserialization vulnerability, providing source code, binaries, and documentation…

code-analysisexploitationpenetration-testing+3
1 year ago
jetty-9.4.31.v20200723_CVE-2023-26049 preview

jetty-9.4.31.v20200723_CVE-2023-26049

GitHubuthrasri/jetty-9.4.31.v20200723_cve-2023-26049

Exploit code and analysis for CVE-2023-26049 targeting Jetty 9.4.31, demonstrating a vulnerability in the web server for security testing and…

code-analysisexploitationpenetration-testing+3
1 year ago
vulnhuntr preview

vulnhuntr

GitHubprotectai/vulnhuntr

Zero shot vulnerability discovery using LLMs

ai-securitycode-analysispenetration-testing+3
2.8k1 year ago
noir preview

noir

GitHubowasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

api-securitydevsecopspenetration-testing+3
1.4k4h 31m ago
sec-af preview

sec-af

GitHubagent-field/sec-af

AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.

ai-securitycode-analysisdevsecops+7
1991 month ago
ParrotNG preview

ParrotNG

GitHubikkisoft/parrotng

Java-based tool to detect Adobe Flex SWF files vulnerable to CVE-2011-2461, usable as a command-line utility or Burp Suite passive scanner plugin.

exploitationpenetration-testingstatic-analysis+3
4811 years ago
dllspy preview

dllspy

GitHubn7on/dllspy

Discover input surfaces and security issues in compiled .NET assemblies — without running them.

api-securityauthenticationcode-analysis+5
396 months ago
reactguard preview

reactguard

GitHubtheori-io/reactguard

ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)

code-analysispenetration-testingstatic-analysis+3
189 months ago
ghost-checker preview

ghost-checker

GitHubfser/ghost-checker

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

code-analysisexploitationpenetration-testing+2
611 years ago
CVE-2022-37705 preview

CVE-2022-37705

GitHubmaherazzouzi/cve-2022-37705

Amanda 3.5.1 second LPE.

binary-exploitationcode-analysisexploitation+4
33 years ago
Previous123…8Next