Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2072 results

sandsifter

xoreaxeaxeax/sandsifter

The x86 processor fuzzer

binary-analysisfuzzinghardware-security+2

5.1k9 years ago

inspect_petri

meridianlabs-ai/inspect_petri

An alignment auditing agent capable of quickly exploring alignment hypothesis

adversarial-attackai-securityeducation+4

1.3k27 days ago

sandsifter

battelle/sandsifter

The x86 processor fuzzer

binary-analysiseducationfuzzing+4

5329 years ago

CVE-2021-43798-EXPLOIT

k3ystr0k3r/cve-2021-43798-exploit

A PoC exploit for CVE-2021-43798 - Grafana Directory Traversal

educationexploitationinformation-gathering+3

42 years ago

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

harshiys/cve-2007-2447-exploitation-siem-detection-lab

Isolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)

educationexploitationexploit-frameworks+7

1 month ago

n8n-vulnerability-detection

rxerium/n8n-vulnerability-detection

Vulnerability detection scripts for the n8n product.

penetration-testingreconnaissancethreat-intelligence+3

18 months ago

CVE-2022-46169

antisecc/cve-2022-46169

Exploit for CVE-2022-46169 in Cacti, enabling unauthenticated remote code execution via crafted HTTP requests to remote_agent.php.

command-and-controlexploitationremote-access-tool+2

3 years ago

boofuzz

jtpereyda/boofuzz

A fork and successor of the Sulley Fuzzing Framework

dns-fuzzingfuzzingnetwork-security+3

2.4k4 days ago

TLS-Attacker

tls-attacker/tls-attacker

Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

cryptographyfuzzingnetwork-security+2

8812 months ago

stunner

firefart/stunner

Test and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…

exploitationmisconfigurationnetwork-security+3

86616 days ago

fragattacks

vanhoefm/fragattacks

Automated vulnerability tester for Wi-Fi clients and access points, detecting FragAttacks fragmentation/aggregation flaws through frame injection,…

exploitationnetwork-securitypenetration-testing+3

1.3k1 year ago

HellRaiser

m0nad/hellraiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

network-securityport-scanningvulnerability-analysis+1

5844 years ago

mutiny-fuzzer

cisco-talos/mutiny-fuzzer

Network protocol fuzzer that replays PCAP traffic through a mutational engine (Radamsa) to quickly discover vulnerabilities in target hosts via…

fuzzingnetwork-securitypenetration-testing+1

6414 years ago

pulsar

hgascon/pulsar

Protocol Learning and Stateful Fuzzing

fuzzingmachine-learningnetwork-security+1

3544 years ago

scirius

stamusnetworks/scirius

Web interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…

defensive-toolsintrusion-detectionnetwork-security+3

6861 year ago

vscan

xen0vas/vscan

vulnerability scanner tool using nmap and nse scripts

network-securitypenetration-testingvulnerability-analysis+1

2092 years ago

CVE-2020-16898

advanced-threat-research/cve-2020-16898

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

exploitationintrusion-detectionnetwork-security+1

2095 years ago

onelogon

rub-softsec/onelogon

Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).

authenticationexploitationnetwork-security+4

12624 days ago

Previous 123…100 Next