Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
148 results
scarce-apache2 preview

scarce-apache2

GitHubhightechsec/scarce-apache2

A framework for bug hunting or pentesting targeting websites that have CVE-2021-41773 Vulnerability in public

exploitationpenetration-testingvulnerability-scanners+1
62
4 years ago
reactguard preview

reactguard

GitHubtheori-io/reactguard

ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)

code-analysispenetration-testingstatic-analysis+3
188 months ago
AEMPWN preview

AEMPWN

GitHubzoomdbz/aempwn

CVE-2025-54253 | CVE-2025-54254 | Adobe Experience Manager Forms XXE → RCE Framework

exploitationpayload-developmentpenetration-testing+3
47 months ago
pythia-sql-clairvoyance preview

pythia-sql-clairvoyance

GitHubrodhnin/pythia-sql-clairvoyance

Advanced SQL Injection Scanner with AI-powered analysis, ethical compliance framework, and professional reporting.

ai-securitycrawlerdevsecops+5
24 months ago
EpSiLoNPoInT- preview

EpSiLoNPoInT-

GitHubepsilonpoint88-glitch/epsilonpoint-

Modular exploit framework targeting CVE-2026-23550 in WordPress, featuring mass exploitation, obfuscation, post-exploitation, and Docker-based C2…

command-and-controlexploitationpayload-development+7
17 months ago
BadBizness-CVE-2023-51467 preview

BadBizness-CVE-2023-51467

GitHubjakeotte/badbizness-cve-2023-51467

Auto exploit script for the Java web framework OF Biz under CVE-2023-51467.

exploitationpenetration-testingred-teaming+2
2 years ago
AndroBugs_Framework preview
Archived

AndroBugs_Framework

GitHubandrobugs/androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android…

android-securitycode-analysismobile-app-pentesting+3
1.2k7 years ago
arachni preview
Archived

arachni

GitHubarachni/arachni

Web Application Security Scanner Framework

crawlerdynamic-analysis-sandboxingpenetration-testing+3
4.0k4 months ago
Bheem preview
Archived

Bheem

GitHubharsh-bothra/bheem

Scope-based reconnaissance automation framework that orchestrates multiple open-source tools for subdomain enumeration, vulnerability scanning, and…

dns-analysisfuzzinginformation-gathering+5
3755 years ago
oxo preview

oxo

GitHubostorlab/oxo

Modular security scanning orchestrator that combines specialized agents for vulnerability detection, reconnaissance, and fingerprinting across…

devsecopsmobile-securitynetwork-security+3
5823 days ago
aparoid preview

aparoid

GitHubstefan2200/aparoid

Static and dynamic Android application security analysis

android-securitydynamic-analysis-sandboxingmalware-analysis+5
782 years ago
wodat preview

wodat

GitHubinitroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1
794 years ago
burp-automation preview

burp-automation

GitHubjustmorpheus/burp-automation

Performing automated scan using Burp Suite Pro & Vmware Burp Rest API

api-security-testingpenetration-testingvulnerability-scanners+1
553 years ago
Nmap-API preview

Nmap-API

GitHubmorpheuslord/nmap-api

RESTful API wrapping Nmap for automated network scanning, port detection, service enumeration, and vulnerability analysis with optional AI-powered…

api-security-testingnetwork-mappingosint+2
831 year ago
CVE-2022-47966 preview

CVE-2022-47966

GitHubsh4den/cve-2022-47966

The manage engine mass loader for CVE-2022-47966

command-and-controlexploitationpenetration-testing+3
72 months ago
PHPunit-Exploit preview

PHPunit-Exploit

GitHubmadexploits/phpunit-exploit

PHPunit Checker CVE-2017-9841 By MrMad

exploitationpenetration-testingvulnerability-scanners+2
53 years ago
cpsniper preview

cpsniper

GitHub44pie/cpsniper

cPanelSniper STABLE - CVE-2026-41940 optimized for 10M+ targets

authentication-authorizationcommand-and-controlexploitation+5
24 months ago
CVE-2026-39987_exploit preview

CVE-2026-39987_exploit

GitHubmki9/cve-2026-39987_exploit

Exploit for Marimo pre-auth RCE via WebSocket auth bypass, providing interactive shell access on affected versions.

exploitationpenetration-testingremote-access-tool+2
5 months ago
Previous1…789Next