Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

92 results

portscan-CVE-2026-41940

amirrezamarzban/portscan-cve-2026-41940

IP CIDRs (presumably as input, maybe command line or file) and checks ports 2083 and 2087 for openness

information-gatheringnetwork-securitypenetration-testing+3

4 months ago

CVE-2021-43798-mass_scanner

rodpwn/cve-2021-43798-mass_scanner

Mass scanner for Grafana CVE-2021-43798 unauthorized file read, supporting single targets, hostname lists, and IP ranges with PoC verification.

exploitationinformation-gatheringreconnaissance+2

54 years ago

CVE-2026-34197

kondordevsecuritycorp/cve-2026-34197

Exploit for Apache ActiveMQ RCE via Jolokia API (CVE-2026-34197) with command output capture, mass scanning, and auto-exploitation.

exploitationlabs-practicepayload-generation+4

25 months ago

Tell-Me-Root

parameciumzhang/tell-me-root

Batch scanner for CVE-2026-24061 Telnet authentication bypass, with port liveness checks and automated payload attempts for authorized penetration…

authenticationexploitationnetwork-security+2

217 months ago

bigip-scanner

bishopfox/bigip-scanner

Determine the running software version of a remote F5 BIG-IP management interface.

information-gatheringnetwork-securitypenetration-testing+3

692 years ago

cve-2019-0708-scan

major203/cve-2019-0708-scan

Scans IP ranges for CVE-2019-0708 (BlueKeep) vulnerability with Python-based detection and exploitation capabilities.

exploitationnetwork-securitypenetration-testing+2

67 years ago

CVE-2019-0708-scan

lisinan988/cve-2019-0708-scan

Batch scanner for CVE-2019-0708 (BlueKeep) RDP vulnerability with Windows and Linux support, using rdpscan and custom Cscan for mass IP range…

exploitationinformation-gatheringnetwork-security+3

4 years ago

CVE-2026-20169

gigachadusers/cve-2026-20169

Windows-native IoT vulnerability scanner that discovers exposed management interfaces, tests default credentials, and validates network segmentation…

embedded-systems-securityhardware-iot-securityiot-security+3

11 month ago

CVE-2020-5902-POC-EXP

lijiaxing1997/cve-2020-5902-poc-exp

批量扫描CVE-2020-5902，远程代码执行，已测试

exploitationpenetration-testingremote-access-tool+2

106 years ago

MassZeroLogon

likeww/masszerologon

Tool for mass testing ZeroLogon vulnerability CVE-2020-1472

exploitationinformation-gatheringnetwork-security+3

3 years ago

checkvulnCVE20205902

renanhsilva/checkvulncve20205902

A powershell script to check vulnerability CVE-2020-5902 of ip list

exploitationinformation-gatheringpenetration-testing+3

16 years ago

CVE-2020-1938TomcatAjpScanner

woaiqiukui/cve-2020-1938tomcatajpscanner

批量扫描TomcatAJP漏洞

exploitationinformation-gatheringpenetration-testing+3

156 years ago

Validate-CVE-2023-29489-scanner-

makurorororororororo/validate-cve-2023-29489-scanner-

Automated scanner to verify CVE-2023-29489 XSS vulnerability on Cpanel webcall interfaces, supporting mass IP scanning via CIDR ranges and common…

educationexploitationpenetration-testing+2

22 years ago

spill

go0dspeed/spill

POC scanner for CVE-2024-47176

exploitationnetwork-mappingpenetration-testing+2

81 year ago

Pulse

nuc13us/pulse

Pulse Secure VPN CVE-2019-11510

exploitationinformation-gatheringpenetration-testing+2

7 months ago

ProxyShell_POC

mithridates1313/proxyshell_poc

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

exploitationpenetration-testingreconnaissance+2

164 years ago

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

deathstroke-source/mass-scanner-for-cve-2019-0708-rdp-rce-exploit

Scan through given ip list

exploitationnetwork-securitypenetration-testing+2

17 years ago

log4j-quick-scan

metodidavidovic/log4j-quick-scan

Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library.

exploitationinformation-gatheringnetwork-security+3

4 years ago

Previous12 3 4 5 6 Next