Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
1547 results
ARTEX preview

ARTEX

GitHubbaarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9
8555 days ago
CVE-2026-114509 preview

CVE-2026-114509

GitHubnxploited/cve-2026-114509

Laravel TokenGuard authentication bypass through non-string API credentials

authenticationexploitationinformation-gathering+6
3 days ago
CVE-2026-77647 preview

CVE-2026-77647

GitHubnxploited/cve-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code

exploitationpayload-generationpenetration-testing+5
4 days ago
LFITester preview

LFITester

GitHubkostas-pa/lfitester

Python3 tool that detects and exploits Local File Inclusion vulnerabilities, with crawling, path traversal and filter bypass payloads, and automated…

crawlerexploitationfuzzing+7
1121 year ago
CVEngine preview

CVEngine

GitHubhevnsnt/cvengine

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

ai-securityemail-securityinformation-gathering+8
3724 days ago
CVE-2026-111497 preview

CVE-2026-111497

GitHub0xblackash/cve-2026-111497

Advisory and proof-of-concept toolkit for CVE-2026-111497 (Node2Shell), a Brotli heap overflow in Node.js, with trigger scripts, version checker, and…

defensive-toolseducationexploitation+6
14 days ago
node2shell-scanner preview

node2shell-scanner

GitHubassetnote/node2shell-scanner

High fidelity detection mechanism for node2shell (CVE-2026-111497)

defensive-toolsreconnaissancevulnerability-analysis+3
536 days ago
hvt preview

hvt

GitHubaffolter-engineering/hvt

Rust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…

api-security-testingconfiguration-auditingmisconfiguration+5
25 days ago
thc-BloodMiami preview

thc-BloodMiami

GitHubfoxcornlab/thc-bloodmiami

AI chat-box pentesting tool in C: fires language (SQLi/NoSQL/XSS/SSTI) and prompt injection payloads at chat interfaces and flags the ones that bite

ai-securityapi-security-testingfuzzing+5
7 days ago
ShellSCope preview

ShellSCope

GitHubd0rb/shellscope

Defensive exposure auditor for Plex2Shell and php2shell — find your own before they find you.

configuration-auditingdefensive-toolsdevsecops+7
9 days ago
XSSYA-V-2.0 preview

XSSYA-V-2.0

GitHubyehia-mamdouh/xssya-v-2.0

Python XSS scanner that confirms reflected and encoded-payload injection, executes payloads to capture cookies, detects WAFs, and tests XST with a…

information-gatheringpayload-generationpenetration-testing+5
839 years ago
php2shell-scanner preview

php2shell-scanner

GitHubassetnote/php2shell-scanner

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

defensive-toolspenetration-testingreconnaissance+4
9687 days ago
php2shell-checker preview

php2shell-checker

GitHubopenai/php2shell-checker

CLI that checks a website's PHP version or a local PHP binary against embedded patch cutoffs to determine php2shell vulnerability status, with JSON…

defensive-toolsinformation-gatheringvulnerability-analysis+3
1.5k8 days ago
php2shell-scanner preview

php2shell-scanner

GitHubjoasasantos/php2shell-scanner

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing,…

information-gatheringnetwork-mappingosint+7
1119 days ago
CVE-2025-49132 preview

CVE-2025-49132

GitHub2t8a/cve-2025-49132

Python scanner for CVE-2025-49132 that exploits a path traversal in Pterodactyl Panel's locale endpoint to extract exposed database configuration…

data-exfiltrationexploitationinformation-gathering+5
1 year ago
pfsense-cp-filemanager-write preview

pfsense-cp-filemanager-write

GitHubabraxas/pfsense-cp-filemanager-write

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - File write - CP file manager

exploitationlabs-practicepapers-research+5
16 days ago
summit preview

summit

GitHubpennacle-security/summit

Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

api-security-testingfuzzinginformation-gathering+9
45 days ago
SecretSifter preview

SecretSifter

GitHubowasp/secretsifter

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

ai-securityapi-securitydefensive-tools+7
816 days ago
Previous12…86Next