Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
15 results
SSRFmap preview

SSRFmap

GitHubswisskyrepo/ssrfmap

Automatic SSRF fuzzer and exploitation tool

ctfexploitationfuzzing+4
3.6k10 days ago
violin preview

violin

GitHubstrategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

authentication-authorizationexploitationosint+8
734 days ago
Pollenisator preview

Pollenisator

GitHubalgosecure/pollenisator

Collaborative pentest tool with highly customizable tools

information-gatheringpenetration-testingpenetration-testing-frameworks+1
745 years ago
bypass-url-parser preview

bypass-url-parser

GitHublaluka/bypass-url-parser

Tests hundreds of URL bypass techniques against 40X protected pages using raw curl requests, with multi-mode scanning, header spoofing, and JSON/HTML…

information-gatheringpenetration-testingvulnerability-analysis+2
1.1k1 year ago
lab-cve-2025-57819 preview

lab-cve-2025-57819

GitHubimbios/lab-cve-2025-57819

FreePBX CVE-2025-57819 lab (Docker) + Nuclei POC for unauth SQLi (time-based).

educationexploitationlabs-practice+3
111 months ago
jok3r preview

jok3r

GitHubkoutto/jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

exploitationinformation-gatheringnetwork-security+6
1.1k6 years ago
MyJWT preview

MyJWT

GitHubtyki6/myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

password-crackingpenetration-testingvulnerability-analysis+1
13810 months ago
jok3r preview

jok3r

GitHubyottaiq/jok3r

Jok3r - Network and Web Pentest Framework

exploitationinformation-gatheringnetwork-security+6
167 years ago
laf preview

laf

GitHubioactive/laf

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the…

cryptographyexploitationfuzzing+5
1873 years ago
Metasploit-Wordpress-Canto-Exploit-RCE preview

Metasploit-Wordpress-Canto-Exploit-RCE

GitHubpuppetma4ster/metasploit-wordpress-canto-exploit-rce

this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452

exploit-frameworkspayload-developmentpenetration-testing+3
5 months ago
DELTA preview

DELTA

GitHubseungsoo-lee/delta

PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK

exploit-frameworksfuzzingnetwork-security+2
923 years ago
pentest-a2p2v-core preview

pentest-a2p2v-core

GitHubpentest-a2p2v/pentest-a2p2v-core

Core A2P2V functionality (command line based)

exploit-frameworkspenetration-testingvulnerability-analysis
682 years ago
CVE-2025-49844 preview

CVE-2025-49844

GitHubzain3311/cve-2025-49844

Exploit CVE-2025-49844 Redis Lua UAF vulnerability to execute arbitrary shellcode and establish persistent backdoor access on vulnerable Redis…

command-and-controlexploitationpayload-development+3
21 day ago
CVE-2026-66066 preview

CVE-2026-66066

GitHubshinthink/cve-2026-66066

CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft →…

exploitationpenetration-testingreconnaissance+3
116 days ago
Decepticon preview

Decepticon

GitHubpurpleailab/decepticon

Autonomous Hacking Agent for Red Team

ai-securitycommand-and-controlctf+9
5.2k3 days ago