Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
171 results
kcatcher preview

kcatcher

GitHubthe-infra-company/kcatcher

Catch what's lurking in your Kafka clusters.

authentication-authorizationcloud-securityconfiguration-auditing+6
68 months ago
cvedb preview

cvedb

GitHubtrailofbits/cvedb

CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database

database-securityinformation-gatheringthreat-intelligence+2
244 months ago
Startup-SBOM preview

Startup-SBOM

GitHubmorpheuslord/startup-sbom

A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.

cloud-securityconfiguration-auditingcontainer-security+4
175 months ago
CVE-2012-4431 preview

CVE-2012-4431

GitHubimjdl/cve-2012-4431

Apache Tomcat source code repository for CVE-2012-4431, a Java servlet container vulnerability. Provides the vulnerable codebase for analysis and…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
7 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubyuma-tsushima07/cve-2024-3094

A script to detect if xz is vulnerable - CVE-2024-3094

general-purpose-utilitiesmisconfigurationscripting-automation+2
42 years ago
volatility preview
Archived

volatility

GitHubvolatilityfoundation/volatility

An advanced memory forensics framework

digital-forensicsforensicsincident-response+4
8.1k1 year ago
RootPipeTester preview

RootPipeTester

GitHubsideeffect42/rootpipetester

RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later

educationexploitationpenetration-testing+2
1811 years ago
cve-2024-3094-detect preview

cve-2024-3094-detect

GitHubgalacticquest/cve-2024-3094-detect

Bash script to detect vulnerable XZ Utils versions (CVE-2024-3094) and downgrade to a safe release, supporting multiple Linux distributions and…

general-purpose-utilitiesmisconfigurationscripting-automation+2
12 years ago
linux-exploit-suggester-2 preview

linux-exploit-suggester-2

GitHubh3x0v3rl0rd/linux-exploit-suggester-2

Post-exploitation utility that scans kernel/OS version and configuration to suggest applicable local privilege escalation exploits.

exploitationinformation-gatheringpenetration-testing+3
3 years ago
pyshellshock preview
Archived

pyshellshock

GitHubramnes/pyshellshock

😱 Python library and utility for CVE-2014-6271 (aka. "shellshock")

code-analysisexploitationpenetration-testing+2
29 years ago
ROPE preview

ROPE

GitHubxhowenma/rope

Defense framework enforcing routed origin policy to prevent indirect prompt injection in tool-using LLM agents, with deterministic origin checks and…

ai-securitydefensive-toolseducation+2
20 days ago
DependencyCheck preview

DependencyCheck

GitHubdependency-check/dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

devsecopssupply-chain-securityvulnerability-analysis+1
7.7k13h 45m ago
CVE-2024-38063 preview

CVE-2024-38063

GitHubdiegoalbuquerque/cve-2024-38063

mitigation script by disabling ipv6 of all interfaces

general-purpose-utilitiesmisconfigurationnetwork-security+2
132 years ago
wesng preview

wesng

GitHubbitsadmin/wesng

Windows Exploit Suggester - Next Generation

exploitationinformation-gatheringprivilege-escalation+1
4.9k2 days ago
RsaCtfTool preview

RsaCtfTool

GitHubrsactftool/rsactftool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

cryptographyctfeducation+3
7.1k1 day ago
kexkill preview

kexkill

GitHubdag-erling/kexkill

SSH KEXINIT flood tool exploiting CVE-2016-8858 to trigger memory exhaustion in vulnerable OpenSSH servers. Proof-of-concept for denial-of-service…

exploitationnetwork-securitypenetration-testing+1
78 years ago
hijackthis preview

hijackthis

GitHubdragokas/hijackthis

A free utility that finds malware, adware and other security threats

defensive-toolseducationforensics+2
8112 months ago
SpecuCheck preview

SpecuCheck

GitHubionescu007/specucheck

Windows utility that queries kernel API to report software and hardware mitigation status against speculative execution vulnerabilities (Meltdown,…

educationhardware-securityvulnerability-analysis
5857 years ago
Previous12…10Next