Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
26 results
DakshSCRA preview

DakshSCRA

GitHubcoffeeandsecurity/dakshscra

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…

code-analysisdevsecopseducation+7
45
13 days ago
static-analysis preview

static-analysis

GitHubanalysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

code-analysiscurated-resourcesdevsecops+5
14.8k7 days ago
exploit-CVE-2016-10033 preview

exploit-CVE-2016-10033

GitHubopsxcq/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

code-analysiseducationexploitation+6
4076 years ago
awesome-nodejs-security preview

awesome-nodejs-security

GitHublirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

code-analysiscurated-resourceseducation+5
3.0k23 days ago
Awesome-Pentest preview

Awesome-Pentest

GitHubkc57/awesome-pentest

A list of awesome penetration testing tools and resources.

cloud-securitycurated-resourceseducation+9
842 years ago
nullorigin preview

nullorigin

GitHubrakib-nyc/nullorigin

Research-only AI watermark robustness toolkit: local reverse proxy strips C2PA/EXIF/XMP, Unicode, image/audio stego, OOXML/PDF metadata, and scans…

adversarial-attackai-securityeducation+4
421 days ago
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection preview

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

GitHubpatrickdeanramos/cve-2024-41302-bookea-tu-mesa-is-vulnerable-to-sql-injection

Bookea-tu-Mesa is vulnerable to SQL Injection

code-analysiseducationstatic-code-analysis+3
2 years ago
secure-coding-practices-quick-reference-guide preview

secure-coding-practices-quick-reference-guide

GitHubowasp/secure-coding-practices-quick-reference-guide

The Secure Coding Practices Quick-reference Guide from OWASP

code-analysiscurated-resourceseducation+2
495 months ago
appledb_rs preview

appledb_rs

GitHubsynacktiv/appledb_rs

Curated database of Apple internal artifacts (entitlements, frameworks, device versions) with API, CLI, and WebUI for iOS/macOS security research and…

curated-resourcesinformation-gatheringios-security+3
2710 months ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubtai-e/cve-2021-44228

Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability

code-analysiseducationstatic-code-analysis+1
92 months ago
CVE-2026-32722 preview

CVE-2026-32722

GitHub0xmrma/cve-2026-32722

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

educationpapers-researchpenetration-testing+3
15 months ago
SealSecurity_Exam preview

SealSecurity_Exam

GitHubm-lito13/sealsecurity_exam

Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package

code-analysiseducationstatic-code-analysis+2
2 years ago
Sourcetrail preview
Archived

Sourcetrail

GitHubcoatisoftware/sourcetrail

Sourcetrail - free and open-source interactive source explorer

code-analysiseducationreverse-engineering+2
16.5k4 years ago
semgrep-rules preview

semgrep-rules

GitHub0xdea/semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

binary-analysiscode-analysiscurated-resources+3
87423 days ago
ASST preview

ASST

GitHubowasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

code-analysiseducationstatic-code-analysis+2
1881 year ago
lightweight_static_analysis preview

lightweight_static_analysis

GitHubnccgroup/lightweight_static_analysis

Create useful, lightweight static analyses using open source tools + a tiny bit of your code

code-analysiseducationpenetration-testing+4
136 years ago
CVE-2026-48813-POC preview

CVE-2026-48813-POC

GitHub7alen7/cve-2026-48813-poc

Proof-of-concept exploit for terminal escape sequence injection via malicious filenames that hides Flawfinder's scan findings; fixed in version…

educationexploitationpapers-research+2
3 months ago
smart-contract-vulnerabilities preview

smart-contract-vulnerabilities

GitHubkadenzipfel/smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

curated-resourceseducationstatic-code-analysis+1
2.5k7 months ago
Previous12Next