Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
87 results
buzzer preview

buzzer

GitHubgoogle/buzzer

eBPF fuzzer toolchain for generating random eBPF programs and validating kernel verifier/runtime behavior. Supports coverage-guided fuzzing and…

dynamic-code-analysisfuzzingvulnerability-analysis
47710 months ago
centipede preview

centipede

GitHubdvyukov/centipede

Distributed coverage-guided fuzzing engine compatible with libFuzzer targets; scales to thousands of concurrent jobs, uses sanitizers and corpus…

dynamic-code-analysisfuzzingvulnerability-analysis
791 year ago
slides preview

slides

GitHub0x3c3e/slides

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

dynamic-code-analysiseducationpapers-research+2
503 years ago
28458 preview

28458

GitHubraka200juta/28458

Python exploit script for CVE-2020-28458, a prototype pollution vulnerability in DataTables. It sends crafted payloads to target URLs, supports proxy…

dynamic-code-analysisexploitationpenetration-testing+2
18 months ago
CVE-2024-36886 preview

CVE-2024-36886

GitHubabubakar-shahid/cve-2024-36886

Academic research on N-Day Linux kernel vulnerabilities, analyzing CVE-2024-36886 in the TIPC networking subsystem, lifecycle, impact, and mitigation…

dynamic-code-analysiseducationexploitation+5
11 months ago
cargo-fuzz preview

cargo-fuzz

GitHubrust-fuzz/cargo-fuzz

Cargo subcommand for coverage-guided Rust fuzzing with libFuzzer: create and run fuzz targets, minimize failures and corpora, and report coverage.

dynamic-code-analysisfuzzingvulnerability-analysis
1.9k1 month ago
findom-xss preview
Archived

findom-xss

GitHubdwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

dynamic-code-analysisinformation-gatheringpenetration-testing+3
8663 years ago
CVE-2026-56848 preview

CVE-2026-56848

GitHubopen-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

dynamic-code-analysisexploitationnetwork-security+2
6 days ago
x-stream__xstream_CVE-2021-21345_1-4-15 preview

x-stream__xstream_CVE-2021-21345_1-4-15

GitHubshoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3
1 year ago
honggfuzz preview

honggfuzz

GitHubgoogle/honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

dns-fuzzingdynamic-code-analysisfuzzing+1
3.4k2 months ago
security-audit-skill preview

security-audit-skill

GitHubcloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

code-analysisdynamic-code-analysiseducation+4
3.0k1 month ago
Cooper-ndss-2022 preview

Cooper-ndss-2022

GitHubtca-iscas/cooper-ndss-2022

A tool for effective testing the binding layer of scripting languages

binary-analysisdynamic-code-analysisfuzzing+2
814 years ago
CVE-2026-46456 preview

CVE-2026-46456

GitHuboscerd/cve-2026-46456

Reproducer for CVE-2026-46456: Apache Camel camel-aws2-sqs inbound message-attribute header injection enabling downstream producer steering and RCE…

api-securitycloud-securityexploitation+3
29 days ago
CVE-2026-46726 preview

CVE-2026-46726

GitHuboscerd/cve-2026-46726

Reproducer for CVE-2026-46726 demonstrating WebSocket header injection in Apache Camel camel-vertx-websocket enabling SSRF and property-placeholder…

api-securityexploitationpenetration-testing+3
1 month ago
path-auditor preview
Archived

path-auditor

GitHubgoogle/path-auditor

Runtime libc function auditor that detects file access race conditions and symlink vulnerabilities by hooking filesystem syscalls via LD_PRELOAD,…

binary-analysisdynamic-code-analysisexploitation+3
2505 years ago
dalfox preview

dalfox

GitHubhahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

devsecopsdynamic-code-analysispenetration-testing+5
5.3k6h 45m ago
oss-fuzz-gen preview

oss-fuzz-gen

GitHubgoogle/oss-fuzz-gen

Generates and evaluates LLM-created fuzz targets against OSS-Fuzz to discover real-world vulnerabilities in C/C++, Java, and Python projects.

ai-securitydevsecopsdynamic-code-analysis+3
1.4k5 months ago
DLLirant preview

DLLirant

GitHubredteamsocietegenerale/dllirant

Automates DLL hijacking and DLL proxying research on Windows binaries by analyzing PE imports, generating proxy DLLs, and producing proof-of-concept…

binary-analysisdynamic-code-analysisexploitation+3
5033 years ago
Previous12345Next