Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
60 results
Vulnerability Findings Database -- VulnBook-deletion_scheduled-85395299 preview

Vulnerability Findings Database -- VulnBook-deletion_scheduled-85395299

GitLabt-beckett/vulnbook-deletion_scheduled-85395299

Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…

defensive-toolsinformation-gatheringthreat-feeds-aggregators+2
5 days ago
Vulnerability Database -- VulnBook preview

Vulnerability Database -- VulnBook

GitLabt-beckett/vulnbook

Static vulnerability findings tracker with parallel search across 11 CVE databases, EPSS enrichment, CISA KEV badges, coordinated disclosure…

defensive-toolsincident-responsethreat-feeds-aggregators+2
6 days ago
AISA-Scanner preview

AISA-Scanner

GitHubgmh5225/aisa-scanner

AISA-Scanner is an AI-powered autonomous vulnerability scanner that maps CVEs to metasploit exploits, MITRE, CEH, and SANS, delivering intelligent,…

ai-securityexploitationpenetration-testing+6
11 year ago
fortra-goanywhere-mft-vulnerability-detection preview

fortra-goanywhere-mft-vulnerability-detection

GitHubrxerium/fortra-goanywhere-mft-vulnerability-detection

Vulnerability detection scripts for the Goanywhere MFT product.

information-gatheringpenetration-testingthreat-intelligence+3
8 months ago
n8n-vulnerability-detection preview

n8n-vulnerability-detection

GitHubrxerium/n8n-vulnerability-detection

Vulnerability detection scripts for the n8n product.

penetration-testingreconnaissancethreat-intelligence+3
17 months ago
vex-repo-spec preview

vex-repo-spec

GitHubaquasecurity/vex-repo-spec

VEX Repository Specification

devsecopssupply-chain-securitythreat-intelligence+1
72 years ago
CVE-2026-50522 preview

CVE-2026-50522

GitHubchpratik/cve-2026-50522

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

curated-resourceseducationincident-response+3
24 days ago
cms-exploitation-campaign preview

cms-exploitation-campaign

GitHubrxerium/cms-exploitation-campaign

Large Scale Exploitation Campaign against CMS devices reported in July 2026

defensive-toolsintrusion-detectionthreat-intelligence+4
31 month ago
CVE-2026-9830 preview

CVE-2026-9830

GitHubchpratik/cve-2026-9830

Threat intelligence report repository for CVE-2026-9830, an authentication bypass vulnerability in BookingPress Pro WordPress plugin, with detailed…

authenticationincident-responsepapers-research+5
24 days ago
nvd preview

nvd

GitHubdaehee/nvd

Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds

information-gatheringthreat-intelligenceutilities-frameworks+1
335 years ago
pollyscan preview

pollyscan

GitHubpadayali-jd/pollyscan

A specialized vulnerability scanner designed to detect CVE-2024-38526, the Polyfill.io Supply Chain Attack, helping organizations identify and…

misconfigurationsupply-chain-securitythreat-intelligence+2
61 year ago
React2Shell-Library preview

React2Shell-Library

GitHubwebsecuritylabs/react2shell-library

A curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as…

curated-resourceseducationexploitation+6
77 months ago
citrix-honeypot preview

citrix-honeypot

GitHubeliushhimel/citrix-honeypot

Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attempts

defensive-toolsnetwork-securitythreat-intelligence+2
6 years ago
Wireshark preview

Wireshark

GitHubkirkdjohnson/wireshark

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

command-and-controldigital-forensicseducation+9
32 years ago
-Ruby-dl-handle.c-CVE-2009-5147- preview

-Ruby-dl-handle.c-CVE-2009-5147-

GitHubzhangyongbo100/-ruby-dl-handle.c-cve-2009-5147-
code-analysiscurated-resourceseducation+3
7 years ago
react2shell-honeypot preview

react2shell-honeypot

GitHubstrainxx/react2shell-honeypot

My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)

information-gatheringintrusion-detectionthreat-intelligence+2
48 months ago
Detecting-and-Analyzing-CVE-2024-24919-Exploitation preview

Detecting-and-Analyzing-CVE-2024-24919-Exploitation

GitHubmacuchegit/detecting-and-analyzing-cve-2024-24919-exploitation
digital-forensicseducationincident-response+5
1 year ago
CVE-2025-55182-Attack-Analysis preview

CVE-2025-55182-Attack-Analysis

GitHubngvcanh/cve-2025-55182-attack-analysis

Real-world attack analysis of CVE-2025-55182 (React2Shell) - React Server Components RCE vulnerability

educationforensicsincident-response+5
8 months ago
Previous1234Next