Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
54 results
Good-MITM preview

Good-MITM

GitHubzu1k/good-mitm

Rule-based MITM engine. Rewriting, redirecting and rejecting on HTTP(S) requests and responses, supports JavaScript rule.

network-securityprivacyscripting-automation+3
858
3 years ago
vmp-lazy-unpack preview

vmp-lazy-unpack

GitHubx86rc/vmp-lazy-unpack

Emulation-based unpacker and import resolver for Windows x86/x64 VMProtect 3.x binaries, using Unicorn to emulate syscalls and rebuild the IAT…

binary-analysisbinary-exploitationdynamic-analysis-sandboxing+4
46318 days ago
revng preview

revng

GitHubrevng/revng

Open source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…

binary-analysiscode-analysisdebuggers+6
1.8k12h 37m ago
qsynthesis preview

qsynthesis

GitHubquarkslab/qsynthesis

Greybox Synthesizer geared for deobfuscation of assembly instructions.

binary-analysiscode-analysisdynamic-analysis-sandboxing+5
1811 year ago
h2spacex preview

h2spacex

GitHubnxenon/h2spacex

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

exploitationfuzzingnetwork-security+6
2294 months ago
ColonelClustered preview

ColonelClustered

GitHubhoodoer/colonelclustered

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…

fuzzingmachine-learningpenetration-testing+5
121 month ago
Corporate_Masks preview

Corporate_Masks

GitHubgolem445/corporate_masks

8-14 character Hashcat masks based on analysis of 3.2 million NTLM hashes cracked while pentesting

hash-analysispassword-attackspassword-cracking+3
2063 months ago
OMEN preview

OMEN

GitHubrub-syssec/omen

Markov model-based password guesser in C that enumerates candidates by probability, generating most likely passwords first for hash cracking via…

cryptographyhash-analysispapers-research+3
3357 years ago
GreeDoS_V2 preview

GreeDoS_V2

GitHubmrechofi/greedos_v2

A Multi-vector DoS tool for Cybersecurity Red Teamers' .

exploitationnetwork-securitypayload-generation+4
188 months ago
ptxNinja preview

ptxNinja

GitHubseekbytes/ptxninja

Binary Ninja plugin for reverse engineering PTX -- the virtual instruction set architecture of CUDA-based GPUs.

binary-analysiscode-analysishardware-iot-security+3
658 months ago
blackarch preview

blackarch

GitHubblackarch/blackarch

An ArchLinux based distribution for penetration testers and security researchers.

curated-resourceseducationexploit-frameworks+8
3.5k1 day ago
FolkPatch preview

FolkPatch

GitHublyravoid/folkpatch

Root access to the kernel can be achieved simply by patching the Boot partition for reflashing. This solution is based on a non-parallel extended…

android-securitymobile-securitypayload-development+3
1.3k3 days ago
sigma-cli preview

sigma-cli

GitHubsigmahq/sigma-cli

The Sigma command line interface based on pySigma

defensive-toolsintrusion-detectionlog-analysis+2
2035 days ago
p2p preview

p2p

GitHubmiroslavpejic85/p2p

🖥️ P2P Remote Desktop - Portable peer-to-peer remote desktop with no installation required.

network-securityremote-access-toolutilities-frameworks
4.1k2 years ago
assethook preview

assethook

GitHubnccgroup/assethook

LD_PRELOAD magic for Android's AssetManager

android-securitydynamic-analysis-sandboxingmobile-app-pentesting+3
829 years ago
SusanRTTI preview

SusanRTTI

GitHubnccgroup/susanrtti

Another RTTI Parsing IDA plugin

binary-analysisreverse-engineeringstatic-analysis+1
3123 years ago
io_uring_scanner preview

io_uring_scanner

GitHubsynacktiv/io_uring_scanner

io_uring based network scanner written in Rust

information-gatheringnetwork-mappingpenetration-testing+2
461 year ago
bbs preview

bbs

GitHubsynacktiv/bbs

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of…

network-securitypenetration-testingred-teaming+2
973 months ago
Previous123Next