Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
25439 results
cuckoo preview
Archived

cuckoo

GitHubcuckoosandbox/cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

dynamic-analysis-sandboxingforensicsmalware-analysis+2
6.0k
5 years ago
CISA-KEV preview

CISA-KEV

GitHubrxerium/cisa-kev

Aggregates and cross-references CISA's Known Exploited Vulnerabilities with VulnCheck KEV and Nuclei scanning templates for coverage analysis.

curated-resourcesthreat-intelligencevulnerability-analysis+1
47 days ago
Reversecore_MCP preview

Reversecore_MCP

GitHubsjkim1127/reversecore_mcp

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…

binary-analysisdigital-forensicsdynamic-analysis-sandboxing+7
18512h 34m ago
tugarecon preview

tugarecon

GitHubskynet0x01/tugarecon

TugaRecon is an advanced subdomain reconnaissance and intelligence framework built for security researchers, penetration testers and OSINT…

dns-analysisinformation-gatheringosint+4
2207 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubtinashelorenzi/cve-2025-55182

Proof-of-concept exploit for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. Includes automated Python exploit, technical…

educationexploitationintrusion-detection+6
10 months ago
route-sixty-sink preview
Archived

route-sixty-sink

GitHubmandiant/route-sixty-sink

Link sources to sinks in C# applications.

binary-analysiscode-analysisstatic-analysis+3
1504 years ago
seccubus preview

seccubus

GitHubseccubus/seccubus

Easy automated vulnerability scanning, reporting and analysis

defensive-toolslog-analysisnetwork-mapping+5
7127 years ago
nox-framework preview

nox-framework

GitHubnox-project/nox-framework

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

crawlerdata-exfiltrationdigital-forensics+8
3256 months ago
schrodingers-toctou preview

schrodingers-toctou

GitHubxoreaxeaxeax/schrodingers-toctou

Detect compiler-invented memory loads that turn secure C into TOCTOU vulnerabilities. Includes automated source audits, Unicorn-based binary…

binary-analysisdynamic-analysis-sandboxingeducation+3
942 months ago
CVE-2025-21756 preview

CVE-2025-21756

GitHubh3raklez/cve-2025-21756

Educational lab demonstrating a use-after-free (UAF) exploit in the Linux kernel's vsock subsystem for local privilege escalation to root, with…

binary-exploitationctfeducation+4
17 months ago
CVE-2025-14857-MongoBleed preview

CVE-2025-14857-MongoBleed

GitHubermensonx/cve-2025-14857-mongobleed

Functional proof-of-concept exploit for CVE-2025-14847 (MongoBleed), a pre-authentication heap memory disclosure vulnerability in MongoDB. Includes…

database-securityeducationexploitation+3
10 months ago
FirmAE preview

FirmAE

GitHubpr0v3rbs/firmae

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

dynamic-analysis-sandboxingembedded-systems-securityfirmware-analysis+3
8944 months ago
SucoshScanny preview

SucoshScanny

GitHubmustafabilgici/sucoshscanny

"Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performing code…

code-analysissecret-detectionstatic-code-analysis+3
392 years ago
work1-secure-api preview

work1-secure-api

GitHubght657/work1-secure-api

HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis

api-securityauthentication-authorizationdevsecops+7
6 days ago
FinalRecon preview

FinalRecon

GitHubthewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

crawlerdns-analysisinformation-gathering+7
2.9k3 days ago
PoC---CVE-2023-26482-RCE-LAB-Nextcloud preview

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

GitHubisabbii/poc---cve-2023-26482-rce-lab-nextcloud

Docker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…

educationexploitationlabs-practice+5
8 months ago
CVE-2026-60137_CVE-2026-63030 preview

CVE-2026-60137_CVE-2026-63030

GitHubdungsocool/cve-2026-60137_cve-2026-63030

WordPress unauthenticated RCE exploit combining route confusion and SQL injection. Automated script, lab setup, and detailed vulnerability analysis…

educationexploitationlabs-practice+3
3 months ago
CVE-2026-49777 preview

CVE-2026-49777

GitHubizxci/cve-2026-49777

Python exploit for CVE-2026-49777, a critical unauthenticated RCE in ShapedPlugin Product Slider Pro for WooCommerce. Includes automated detection…

code-analysiseducationexploitation+3
4 months ago
Previous123…100Next