Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

76 results

GitSecure

bugbounty-site/gitsecure

Detect exposed API keys on GitHub commits.

code-analysisdevsecopssecret-detection+1

354 years ago

log4j-remediation

name/log4j-remediation

Discover and remediate Log4Shell vulnerability [CVE-2021-45105]

misconfigurationsupply-chain-securityvulnerability-analysis+1

14 years ago

CVE-2017-5638

xhendos/cve-2017-5638

educationexploitationpenetration-testing+3

8 years ago

Archived

LAST

dewolfrobin/last

Linux Automated Security scanning Tool

information-gatheringnetwork-mappingpenetration-testing+5

107 years ago

cve_2023_38408_scanner

fazilbaig1/cve_2023_38408_scanner

Vulnerability Overview CVE-2023-38408 affects OpenSSH versions < 9.3p2 and stems from improper validation of data when SSH agent forwarding is…

exploitationinformation-gatheringnetwork-security+2

1 year ago

offensive-docker

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

container-securityexploit-frameworkspassword-cracking+5

7684 years ago

Striker

s0md3v/striker

Striker is an offensive information and vulnerability scanner.

information-gatheringport-scanningreconnaissance+3

2.3k7 years ago

invokeai-consumer

dannyendortest/invokeai-consumer

Demo consumer for invokeai 5.0.1 (CVE-2024-10821; version named in CVE prose) — endorctl scan target

educationexploitationsupply-chain-security+2

3 months ago

BLUESPAWN

ion28/bluespawn

An Active Defense and EDR software to empower Blue Teams

configuration-auditingdefensive-toolsincident-response+3

1.3k4 months ago

confusploit

p4b3l1t0/confusploit

This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134

exploitationinformation-gatheringosint+3

27 months ago

CVE-2019-5513-scanner

sudosu01/cve-2019-5513-scanner

The VMWare Horizon Connection Server is often used as an internet-facing gateway to an organization’s virtual desktop environment (VDI). Until…

exploitationinformation-gatheringpenetration-testing+3

2 months ago

burpa

0x4d31/burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application…

api-security-testingdevsecopsvulnerability-scanners+1

5358 years ago

openredirect

cappricio-securities/openredirect

This is a tool used by several security researchers to find Open Redirect Bug

penetration-testingvulnerability-scannersweb-security+1

32 years ago

livewire-vuln-scanner

jenderal92/livewire-vuln-scanner

Simple scanner to detect vulnerable Livewire installations.

information-gatheringreconnaissancevulnerability-analysis+3

2 months ago

jsp-webshell-scanner

respondiq/jsp-webshell-scanner

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.

code-analysisdigital-forensicsforensics+6

12 months ago

Apache-HTTP-Server-2.4.50-RCE

zyx2440/apache-http-server-2.4.50-rce

Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for…

educationexploitationpenetration-testing+3

21 year ago

G3-Loop-DoS

renancesarr/g3-loop-dos

This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169…

educationexploitationnetwork-security+2

2 years ago

log4j2burpscanner

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2

8413 years ago

Previous 1 234 5 Next