Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
52 results
brutus preview

brutus

GitHubpraetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

authenticationexploitationinformation-gathering+7
311
8h 58m ago
radmin-vpn-linux preview

radmin-vpn-linux

GitHubbaptisterajaut/radmin-vpn-linux

Run Radmin VPN on Linux via Wine — custom driver, TAP bridge, zero packet loss

binary-analysishardware-iot-securitylateral-movement+5
1551 day ago
dnsx preview

dnsx

GitHubprojectdiscovery/dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

dns-analysisdns-subdomain-enumerationinformation-gathering+2
2.8k3 days ago
RAUDI preview

RAUDI

GitHubcybersecsi/raudi

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

container-securitydevsecopsutilities-frameworks
5615 days ago
vm2 preview

vm2

GitHubpatriksimek/vm2

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

code-analysisdynamic-analysis-sandboxingsecurity-virtualization+1
4.1k6 days ago
jsch preview

jsch

GitHubmwiede/jsch

fork of the popular jsch library

authentication-authorizationencryption-decryption-toolsnetwork-security+2
1.1k8 days ago
content-packs preview

content-packs

GitHubeventum-generator/content-packs

Content packs for Eventum

curated-resourceseducationlog-analysis+2
520 days ago
armory preview

armory

GitHubdepthsecurity/armory

Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related…

information-gatheringosintpenetration-testing+2
42728 days ago
QuantumLock preview

QuantumLock

GitLabroxanne_ardary/quantumlock

QuantumLock is an open-source, quantum-resistant Bitcoin protocol designed to protect digital assets from future quantum computing threats. Featuring…

authenticationcryptographycurated-resources+6
1 month ago
sigma-cli preview

sigma-cli

GitHubsigmahq/sigma-cli

The Sigma command line interface based on pySigma

defensive-toolsintrusion-detectionlog-analysis+2
2041 month ago
rmm preview

rmm

GitHubalevsk/rmm

Recon MindMap (RMM)

information-gatheringpenetration-testingreconnaissance+1
1851 month ago
burp-cc-bridge preview

burp-cc-bridge

GitHublarrypeseckis/burp-cc-bridge

REST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.

api-security-testingpenetration-testingscripting-automation+3
72 months ago
useragent preview

useragent

GitHubprojectdiscovery/useragent

Curated list of categorized User Agents

general-purpose-utilitiesinformation-gatheringosint+2
1193 months ago
swicc preview

swicc

GitHubtomasz-lisowski/swicc

A framework for creating smart cards (ICC-based cards with contacts).

authentication-authorizationembedded-systems-securityhardware-security+2
1423 months ago
cwe-tool preview

cwe-tool

GitHubowasp/cwe-tool

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

code-analysiscurated-resourceseducation+3
643 months ago
cwe-sdk-javascript preview

cwe-sdk-javascript

GitHubowasp/cwe-sdk-javascript

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

code-analysiscurated-resourceseducation+3
323 months ago
buyer-eval-skill preview

buyer-eval-skill

GitHubsalespeak-ai/buyer-eval-skill

B2B software vendor evaluation skill for Claude Code — domain-expert questions, vendor AI agent conversations, evidence-based scoring

ai-securitycurated-resourceseducation+8
673 months ago
Masterchef preview
Archived

Masterchef

GitHubcosasdepuma/masterchef

🍳 The most delicious pentesting tool

educationexploitationpenetration-testing+3
464 months ago
Previous123Next