Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2278 results
nmap-nse-vulnerability-scripts preview

nmap-nse-vulnerability-scripts

GitHubnccgroup/nmap-nse-vulnerability-scripts

NMAP Vulnerability Scanning Scripts

information-gatheringnetwork-securitypenetration-testing+2
623
4 years ago
bypass-url-parser preview

bypass-url-parser

GitHublaluka/bypass-url-parser

Tests hundreds of URL bypass techniques against 40X protected pages using raw curl requests, with multi-mode scanning, header spoofing, and JSON/HTML…

information-gatheringpenetration-testingvulnerability-analysis+2
1.1k1 year ago
cve-scores preview

cve-scores

GitHubarpsyndicate/cve-scores

Aggregates EPSS and VEDAS scores for CVEs, providing exploit prediction and vulnerability prevalence data from open-source intelligence for threat…

information-gatheringosintthreat-intelligence+1
2581 day ago
untitledgoosetool preview

untitledgoosetool

GitHubcisagov/untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

cloud-securitydefensive-toolsdigital-forensics+4
9626 months ago
nimbostratus preview

nimbostratus

GitHubandresriancho/nimbostratus

Tools for fingerprinting and exploiting Amazon cloud infrastructures

cloud-securityexploitationinformation-gathering+3
5163 years ago
GCPBucketBrute preview

GCPBucketBrute

GitHubrhinosecuritylabs/gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

cloud-securityinformation-gatheringprivilege-escalation+2
5723 years ago
macstealer preview

macstealer

GitHubvanhoefm/macstealer

MacStealer: Wi-Fi Client Isolation Bypass

exploitationinformation-gatheringnetwork-security+5
5538 months ago
watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py preview

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

GitHubwatchtowrlabs/watchtowr-vs-cpanel-whm-authbypass-to-rce.py
exploitationinformation-gatheringpenetration-testing+3
4313 months ago
ApacheTomcatScanner preview

ApacheTomcatScanner

GitHubp0dalirius/apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

information-gatheringvulnerability-analysisvulnerability-scanners+1
8917 months ago
URLextractor preview

URLextractor

GitHubeschultze/urlextractor

Information gathering & website reconnaissance | https://phishstats.info/

dns-analysisinformation-gatheringosint+3
4547 years ago
debian-ssh preview

debian-ssh

GitHubg0tmi1k/debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

cryptographyexploitationinformation-gathering+4
4103 years ago
ios-gamed-0day preview

ios-gamed-0day

GitHubillusionofchaos/ios-gamed-0day

iOS gamed exploit (fixed in 15.0.2)

exploitationinformation-gatheringios-security+3
4364 years ago
dnstake preview

dnstake

GitHubpwnesia/dnstake

Fast DNS takeover scanner that checks for missing hosted zones by querying nameservers and fingerprinting providers to identify vulnerable subdomains.

dns-analysisinformation-gatheringsubdomain-enumeration+1
8564 years ago
wig preview

wig

GitHubjekyc/wig

WebApp Information Gatherer

information-gatheringvulnerability-analysisweb-security
5529 years ago
BaRMIe preview

BaRMIe

GitHubnickstadb/barmie

Java RMI enumeration and attack tool.

exploitationinformation-gatheringpenetration-testing+1
7478 years ago
CVE-2019-11510 preview

CVE-2019-11510

GitHubprojectzeroindia/cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

exploitationinformation-gatheringpenetration-testing+3
3606 years ago
rxerium-templates preview

rxerium-templates

GitHubrxerium/rxerium-templates

Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.

curated-resourcesinformation-gatheringpenetration-testing+5
1941 month ago
vortex preview

vortex

GitHubklezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

information-gatheringosintpassword-attacks+7
4514 years ago
Previous1…789…127Next