Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
69 results
shai-hulud-scan preview

shai-hulud-scan

GitHubshayr1/shai-hulud-scan

Claude Code skill to scan machines for Mini Shai-Hulud (CVE-2026-45321) supply chain worm IOCs

educationforensicsincident-response+5
1
5 months ago
aqua-checksums preview

aqua-checksums

GitHubknqyf263/aqua-checksums

Monitors cryptographic integrity of container images, releases, and Git tags for supply chain security, verifying Sigstore cosign signatures with…

container-securitydefensive-toolsdevsecops+2
6 months ago
CVE-2026-40175 preview

CVE-2026-40175

GitHub0xblackash/cve-2026-40175

CVE-2026-40175

cloud-securityeducationexploitation+3
6 months ago
CVE-2026-33634-Scanner preview

CVE-2026-33634-Scanner

GitHubfevar54/cve-2026-33634-scanner

Scanner de IOCs del ataque de cadena de suministro TeamPCP (CVE-2026-33634).

dns-analysisincident-responseioc-management+4
7 months ago
CS50FinalProject preview

CS50FinalProject

GitHubm1lo25/cs50finalproject

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

curated-resourceseducationincident-response+3
11 year ago
cp30_XXE_partial_fix preview

cp30_XXE_partial_fix

GitHubshanika04/cp30_xxe_partial_fix

version between CVE-2018-20433 and CVE-2019-5427

code-analysisdatabase-securitysupply-chain-security+1
5 years ago
boa-detector preview

boa-detector

GitHubcorelight/boa-detector

A vulnerable Boa web server detector.

iot-securitynetwork-securitysupply-chain-security+3
3 years ago
go-dbmigrate preview

go-dbmigrate

GitHubmoisei-dev/go-dbmigrate

Go library and CLI for managing database schema migrations with support for PostgreSQL, MySQL, SQLite, and Cassandra, including up/down migration…

configuration-auditingdatabase-securitydevsecops+2
6 months ago
Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094- preview

Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-

GitHubfevar54/detectar-backdoor-en-liblzma-de-xz-utils-cve-2024-3094-

Regla YARA para detectar el backdoor de liblzma en XZ Utils 5.6.0/5.6.1 (CVE-2024-3094).

incident-responseintrusion-detectionioc-management+3
2 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubmightysai1997/cve-2024-3094

Shell scripts to detect CVE-2024-3094 backdoor in liblzma5 across Kubernetes pods and Docker containers, with SBOM generation via Trivy for…

cloud-securitycontainer-securitydevsecops+3
2 years ago
Cordon preview
Archived

Cordon

GitHubvishnunandan555/cordon

Run any command inside a restricted filesystem view on Linux

configuration-auditingcontainer-securitydevsecops+6
26 months ago
aura preview
Archived

aura

GitHubrootlug/aura

Project Aura: Security auditing and code introspection

code-analysisdevsecopsmalware-analysis+4
76 years ago
yolo-cage preview
Archived

yolo-cage

GitHubborenstein/yolo-cage

AI coding agents that can't exfiltrate secrets or merge their own PRs.

ai-securitycloud-securitycontainer-security+7
1099 months ago
CVE-2024-3094 preview
Archived

CVE-2024-3094

GitHubteyhouse/cve-2024-3094

K8S and Docker Vulnerability Check for CVE-2024-3094

cloud-securitycontainer-securitydevsecops+3
112 years ago
emudhra preview

emudhra

GitHubjschauma/emudhra

Example programs in Go, Java, Node, Perl, Python, Ruby, Rust, and curl that test whether a TLS trust store rejects connections to known-bad eMudhra…

configuration-auditingcryptographydefensive-tools+4
39 days ago
Previous1234Next