Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
668 results
packman preview

packman

GitHubowasp/packman

A documentation and tracking project with the goal of making package management systems more secure.

vulnerability-analysisconfiguration-auditingsupply-chain-security+3
52
5 years ago
PSCF preview

PSCF

GitHubowasp/pscf
devsecopssupply-chain-securitypapers-research+2
2810 months ago
SecureML preview

SecureML

GitHubowasp/secureml

SecureML - Securing and Watermarking AL models

encryption-decryption-toolscryptographydevsecops+2
27 months ago
Software-Component-Verification-Standard preview

Software-Component-Verification-Standard

GitHubowasp/software-component-verification-standard

Software Component Verification Standard (SCVS)

vulnerability-analysisconfiguration-auditingsupply-chain-security+2
1631 year ago
vulnerable-mcp-servers-lab preview

vulnerable-mcp-servers-lab

GitHubappsecco/vulnerable-mcp-servers-lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

privilege-escalationvulnerability-analysiscode-analysis+7
2748 months ago
CVE-2021-44228-Scanner preview

CVE-2021-44228-Scanner

GitHublogpresso/cve-2021-44228-scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

vulnerability-scannersvulnerability-analysisconfiguration-auditing+3
8614 years ago
CVE-2025-51726 preview

CVE-2025-51726

GitHubmeisterlos/cve-2025-51726
vulnerability-analysisexploitationreverse-engineering+4
1 year ago
cve-2021-33879 preview

cve-2021-33879

GitHubmmiszczyk/cve-2021-33879

GameLoop update MITM

vulnerability-analysisexploitationweb-application-exploitation+3
5 years ago
CVE-2021-44228-Scanner preview

CVE-2021-44228-Scanner

GitHubmunicipalparkingservices/cve-2021-44228-scanner
vulnerability-scannersvulnerability-analysisexploitation+3
4 years ago
external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827 preview

external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827

GitHubnanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827
general-purpose-utilitiesstatic-analysisvulnerability-analysis+2
3 years ago
4062-1 preview

4062-1

GitHubngyanch/4062-1

CVE-2008-0128

vulnerability-analysiscode-analysisdevsecops+1
7 years ago
cve-2025-54313 preview

cve-2025-54313

GitHubnihilor/cve-2025-54313

Checks projects for compromised packages, suspicious files, and import statements.

static-analysisvulnerability-scannerscode-analysis+2
1 year ago
react2shell-scanner preview

react2shell-scanner

GitHubnxgn-kd01/react2shell-scanner

Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.

vulnerability-scannerscode-analysisexploitation+3
37 months ago
React2shell-CVE-2025-55182-checker preview

React2shell-CVE-2025-55182-checker

GitHuboways/react2shell-cve-2025-55182-checker
vulnerability-scannersvulnerability-analysiscode-analysis+3
28 months ago
pollyscan preview

pollyscan

GitHubpadayali-jd/pollyscan

A specialized vulnerability scanner designed to detect CVE-2024-38526, the Polyfill.io Supply Chain Attack, helping organizations identify and…

vulnerability-scannersweb-securitythreat-intelligence+2
61 year ago
CVE-2024-38526 preview

CVE-2024-38526

GitHubputget/cve-2024-38526

CVE-2024-38526 - Polyfill Scanner

vulnerability-scannersscripting-automationinformation-gathering+3
1 year ago
xzk8s preview

xzk8s

GitHubr0binak/xzk8s

Dockerfile and Kubernetes manifests for reproduce CVE-2024-3094

container-securityvulnerability-analysisexploitation+3
142 years ago
LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050- preview

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

GitHubsastraadiwiguna-purpleeliteteaming/llamastack-rce-deterministic-supply-chain-exploitation-hardening-framework-cve-2024-50050-

LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…

exploit-frameworksvulnerability-analysisdata-exfiltration+9
7 months ago
Previous1…678…38Next