Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
48 results
xss2shell-check preview

xss2shell-check

GitHubsanaullahamanullah/xss2shell-check

Non-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive

defensive-toolsinformation-gatheringpenetration-testing+4
4 days ago
Rail-OT-Protector preview

Rail-OT-Protector

GitHubspinfosecurity/rail-ot-protector

Rail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for…

defensive-toolsinformation-gatheringnetwork-security+6
14 days ago
abap-code-scanner preview

abap-code-scanner

GitHubowasp/abap-code-scanner

ABAP Code Analyzer

code-analysisdevsecopsmisconfiguration+2
101 month ago
packetfence preview

packetfence

GitHubinverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

authentication-authorizationconfiguration-auditingdefensive-tools+6
1.7k10h 22m ago
WPScan preview

WPScan

GitHubalessiodallapiazza/wpscan
information-gatheringpenetration-testingreconnaissance+3
3110 years ago
CVE-2023-25136 preview

CVE-2023-25136

GitHubnhakobyan685/cve-2023-25136

OpenSSH 9.1 vulnerability mass scan and exploit

exploitationnetwork-securitypenetration-testing+3
83 years ago
redis-cve-2026-23479-scanner preview

redis-cve-2026-23479-scanner

GitHubv1c0mmrt/redis-cve-2026-23479-scanner

CVE-2026-23479 Redis Use-After-Free vulnerability detection tool

configuration-auditingdatabase-securitymisconfiguration+3
2 months ago
redis-cve-2026-23479-check preview

redis-cve-2026-23479-check

GitHubpduggusa/redis-cve-2026-23479-check

Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch…

configuration-auditingincident-responsethreat-intelligence+2
2 months ago
omigood preview

omigood

GitHubmarcosimioni/omigood

OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team,…

cloud-securityexploitationinformation-gathering+3
204 years ago
nginx-rift-scanner preview

nginx-rift-scanner

GitHubsimota/nginx-rift-scanner

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis.…

code-analysisconfiguration-auditingstatic-analysis+3
12 months ago
mini-shai-hulud-scanner preview

mini-shai-hulud-scanner

GitHubintrudify/mini-shai-hulud-scanner

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts,…

forensicsincident-responseioc-management+6
23 months ago
log4shell-scanner preview

log4shell-scanner

GitHubarpitgupta369/log4shell-scanner

Lightweight scanner that detects vulnerable Log4j versions and Log4Shell (CVE-2021-44228) indicators in a filesystem tree.

defensive-toolseducationlog-analysis+3
1 month ago
log4fix preview

log4fix

GitHubnanitor/log4fix

Detect and fix log4j log4shell vulnerability (CVE-2021-44228)

code-analysisgeneral-purpose-utilitiesmisconfiguration+3
124 years ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubmelonlonmeo/cve-2025-49132

Poc - CVE-2025-49132

configuration-auditingexploitationinformation-gathering+3
1 year ago
Bug-Bounty-Arsenal-v.3 preview

Bug-Bounty-Arsenal-v.3

GitHubfoxvr-sudo/bug-bounty-arsenal-v.3

50+ detectors across 10 categories, with continuous monitoring built in: schedule recurring scans, get alerted only on new findings, track your…

api-security-testingcrawlerdevsecops+8
121 month ago
nginx-rift-detector preview

nginx-rift-detector

GitHublimo57640-crypto/nginx-rift-detector

Free NGINX Rift CVE-2026-42945 detector for version, rewrite config, ASLR, crash logs, and exploitation indicators.

configuration-auditingdefensive-toolsincident-response+3
1 month ago
CVE-2022-22954 preview

CVE-2022-22954

GitHubmlx15/cve-2022-22954

CVE-2022-22954 VMware Workspace ONE Access free marker SSTI

command-and-controlexploitationpayload-generation+3
54 years ago
blmvuln preview

blmvuln

GitHubmathiasreker/blmvuln

Major Security Vulnerability on PrestaShop Websites - CVE-2022-31101

code-analysisincident-responsemalware-analysis+3
424 years ago
Previous123Next