Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

55 results

Eagle

bitthebyte/eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

exploitationinformation-gatheringmisconfiguration+4

128

5 years ago

HikVision-CVE-2017-7921

kooroshsanaei/hikvision-cve-2017-7921

Multi-threaded scanner to identify HikVision cameras vulnerable to CVE-2017-7921 by testing the ONVIF snapshot endpoint for unauthorized access.

exploitationinformation-gatheringiot-security+3

62 years ago

Freak-Scanner

scottjpack/freak-scanner

Multithreaded FREAK scanner, used to detect SSL EXP Ciphers, vulnerable to CVE-2015-0204

information-gatheringnetwork-securitypenetration-testing+2

411 years ago

-nginxui_discover

null200ok/-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector

information-gatheringnetwork-securityreconnaissance+3

25 months ago

CVE-2019-5418-Scanner

brompwnie/cve-2019-5418-scanner

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

exploitationinformation-gatheringpenetration-testing+3

367 years ago

navgix

hakaioffsec/navgix

Multi-threaded Go tool to detect nginx alias traversal vulnerabilities using heuristic and brute-force techniques for identifying vulnerable…

fuzzingmisconfigurationvulnerability-scanners+1

753 years ago

Subhunter

umutcamliyurt/subhunter

Fast subdomain takeover scanner that checks DNS CNAME records against known fingerprints to detect vulnerable subdomains. Built in Go with…

penetration-testingsubdomain-enumerationvulnerability-scanners+1

883 months ago

citrixmash_scanner

awesome-security/citrixmash_scanner

A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash

exploitationids-ips-evasionpenetration-testing+3

6 years ago

CVE-2026-41940

dennisec/cve-2026-41940

Exploit script for CVE-2026-41940, an authentication bypass in cPanel/WHM using CRLF injection to gain admin access and change root password, with…

authentication-authorizationexploitationpenetration-testing+3

4 months ago

CVE-2026-6271

xxconi/cve-2026-6271

Automated scanner for CVE-2026-6271, a critical unauthenticated arbitrary file upload leading to RCE in the WordPress Career Section plugin. Supports…

educationexploitationpayload-generation+4

3 months ago

Breacher

s0md3v/breacher

An advanced multithreaded admin panel finder written in python.

information-gatheringvulnerability-scannersweb-security

8486 years ago

php-malware-finder

nbs-system/php-malware-finder

YARA-based scanner that detects obfuscated PHP malware and webshells using semantic pattern matching instead of file hashes, with a whitelist system…

malware-analysisstatic-analysisvulnerability-scanners+1

3434 years ago

Reconnoitre

codingo/reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+4

2.2k6 years ago

CVE-2025-61882

sachinart/cve-2025-61882

Multi-threaded scanner for CVE-2025-61882 in Oracle E-Business Suite, exploiting HTTP request smuggling to achieve unauthenticated remote code…

exploitationpenetration-testingreconnaissance+3

1111 months ago

log4j

hassaanahmad813/log4j

Multithreaded Python scanner that detects Log4Shell (CVE-2021-44228) by sending crafted HTTP requests with JNDI payloads and monitoring DNS callbacks…

dns-analysisexploitationinformation-gathering+2

4 years ago