Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
38 results
Pulse preview

Pulse

GitHubnuc13us/pulse

Pulse Secure VPN CVE-2019-11510

exploitationinformation-gatheringpenetration-testing+2
7 months ago
CVE-2021-3438 preview

CVE-2021-3438

GitHubtobiass1402/cve-2021-3438

Detection and remediation for CVE-2021-3438 with Powershell

configuration-auditingmisconfigurationscripting-automation+2
5 years ago
Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device preview

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

GitHubkamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-device

This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…

configuration-auditingdefensive-toolseducation+4
0 years ago
log4jhound preview

log4jhound

GitHubmebibite/log4jhound

Created after the disclosure of CVE-2021-44228. Bash script that detects Log4j occurrences in your projects and systems, allowing you to get insight…

code-analysisdevsecopsstatic-analysis+2
4 years ago
CVE-2020-0796-Checker preview

CVE-2020-0796-Checker

GitHubjoaozietolie/cve-2020-0796-checker

Script that checks if the system is vulnerable to CVE-2020-0796 (SMB v3.1.1)

exploitationnetwork-securitypenetration-testing+2
146 years ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubalt3kx/cve-2022-22965

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

exploitationinformation-gatheringpenetration-testing+3
1004 years ago
Juice Shop With Kubeadm and Tf preview

Juice Shop With Kubeadm and Tf

GitLabzzugab/juice-shop-with-kubeadm-and-tf

Automated deployment of OWASP Juice Shop on Kubernetes using kubeadm and Terraform, with integrated Trivy vulnerability scanning for DevSecOps…

cloud-infrastructure-securitycontainer-securitydevsecops+1
3 months ago
openapi_security_scanner preview

openapi_security_scanner

GitHubngalongc/openapi_security_scanner

Automated authorization security scanner for OpenAPI-based APIs. Tests GET endpoints with multiple credential sets to detect privilege escalation and…

api-security-testingpenetration-testingvulnerability-scanners+1
1735 years ago
extended-ssrf-search preview

extended-ssrf-search

GitHubdamian89/extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

fuzzingpenetration-testingvulnerability-scanners+1
2775 years ago
anchore-engine preview
Archived

anchore-engine

GitHubanchore/anchore-engine

A service that analyzes docker images and scans for vulnerabilities

cloud-securitycontainer-securitydevsecops+3
1.6k3 years ago
DirDar preview

DirDar

GitHubm4dm0e/dirdar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

information-gatheringpenetration-testingvulnerability-scanners+1
4542 years ago
keyguard preview

keyguard

GitHubarzaan789/keyguard

Scan codebases and GCP projects for exposed API credentials

api-securitycloud-securitycode-analysis+6
15 months ago
CVE-2025-34299 preview

CVE-2025-34299

GitHubrxerium/cve-2025-34299

Detection for CVE-2025-34299

exploitationinformation-gatheringpenetration-testing+3
10 months ago
Ghazi preview

Ghazi

GitHubp3n73st3r/ghazi

Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace…

penetration-testingvulnerability-scannersweb-application-exploitation+2
1057 years ago
AutoPWN-Suite preview

AutoPWN-Suite

GitHubgamehunterkaan/autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

exploitationinformation-gatheringnetwork-security+5
1.1k2 months ago
udp-hunter preview

udp-hunter

GitHubnotsosecure/udp-hunter

Network assessment tool for various UDP Services covering both IPv4 and IPv6 protocols

exploitationinformation-gatheringnetwork-security+3
1176 years ago
CVE-2023-23752 preview

CVE-2023-23752

GitHubgibran-abdillah/cve-2023-23752

Bulk vulnerability scanner for CVE-2023-23752 that extracts configuration data from vulnerable Joomla instances.

exploitationinformation-gatheringpenetration-testing+2
83 years ago
pqaudit preview

pqaudit

GitHubpqcworld/pqaudit

Scan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.

code-analysiscryptographydevsecops+5
35 months ago
Previous123Next