Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
114 results
ndaal_public_SBOM_Auditor preview

ndaal_public_SBOM_Auditor

GitLabvpierre/ndaal_public_sbom_auditor

Offline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…

configuration-auditingdefensive-toolsdevsecops+7
1 day ago
0xCr0ssCrush preview

0xCr0ssCrush

GitHubdeathshotxd/0xcr0sscrush

Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.

binary-analysisdefensive-toolsexploitation+4
3722 days ago
SDK preview

SDK

GitHubintelligencex/sdk

SDK for querying the Intelligence X search engine and data archive, supporting selectors like email, domain, IP, and phone. Includes API wrappers in…

api-security-testinginformation-gatheringosint+2
5614 months ago
threat-intel-brief-cve-2026-42208-litellm preview

threat-intel-brief-cve-2026-42208-litellm

GitHubzeltoc/threat-intel-brief-cve-2026-42208-litellm

Threat intelligence brief on CVE-2026-42208, a critical pre-auth SQL injection in BerriAI LiteLLM exploited within 36 hours of disclosure. Covers…

ai-securitycurated-resourceseducation+2
5 months ago
4jfinder.github.io preview

4jfinder.github.io

GitHub4jfinder/4jfinder.github.io

Searchable page for CISA Log4j (CVE-2021-44228) Affected Vendor & Software List

curated-resourcesinformation-gatheringthreat-intelligence+2
64 years ago
dionaea preview

dionaea

GitHubdinotools/dionaea

Low-interaction honeypot that emulates vulnerable network services to capture malware, shellcode, and exploit attempts, with IPv6 and TLS support.

defensive-toolsintrusion-detectionmalware-analysis+2
8185 years ago
Quick-Analysis preview

Quick-Analysis

GitHubvc0rexor/quick-analysis

Provides rapid triage and summarization of malware samples and threat indicators, highlighting key behavioral and contextual details for analysts.

incident-responsemalware-analysisthreat-intelligence
403 years ago
Matanbuchus preview

Matanbuchus

GitHubpr0xylife/matanbuchus
defensive-toolsmalware-analysisthreat-intelligence
52 years ago
ExtractedDefender preview

ExtractedDefender

GitHubhackinglz/extracteddefender

Collection of extracted Microsoft Defender data for security research purposes

curated-resourcesmalware-analysisreverse-engineering+1
2404 years ago
IcedID preview

IcedID

GitHubpr0xylife/icedid
malware-analysisreverse-engineeringthreat-intelligence
322 years ago
mwcfg preview

mwcfg

GitHubc3rb3ru5d3d53c/mwcfg

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

binary-analysisdefensive-toolsmalware-analysis+3
1342 years ago
VN_daily_samples preview

VN_daily_samples

GitHubm4now4r/vn_daily_samples

Daily collection of malicious samples originating from Vietnam for malware analysis, threat intelligence, and detection engineering research.

curated-resourcesmalware-analysisthreat-intelligence
62 years ago
refinery preview

refinery

GitHubbinref/refinery

High Octane Triage Analysis

binary-analysiscryptographyforensics+4
87811 days ago
APT_REPORT preview

APT_REPORT

GitHubblackorbird/apt_report

Interesting APT Report Collection And Some Special IOCs

curated-resourcesmalware-analysisthreat-intelligence
3.1k3 days ago
strelka-ui preview

strelka-ui

GitHubtarget/strelka-ui

Strelka Web UI for File Submission and Analysis

authenticationdefensive-toolslog-analysis+2
751 month ago
cobaltstrike-sleepmask-yara preview

cobaltstrike-sleepmask-yara

GitHubcodextf2/cobaltstrike-sleepmask-yara

Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-…

defensive-toolsintrusion-detectionmalware-analysis+2
161 year ago
ThreatResearch preview

ThreatResearch

GitHubsecurityjoes/threatresearch

Python config extractors for malware families including PlugX, Remcos, templateX, and RedLine Stealer, supporting C2 configuration extraction for…

malware-analysisreverse-engineeringthreat-intelligence
603 years ago
IATelligence preview

IATelligence

GitHubfr0gger/iatelligence

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…

ai-assisted-reversingbinary-analysismalware-analysis+3
3873 years ago
Previous1234567Next