Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

25 results

f5-waf-enforce-sig-CVE-2021-44228

irgoncalves/f5-waf-enforce-sig-cve-2021-44228

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

api-securityconfiguration-auditingdevsecops+3

4 years ago

CVE-2025-36911_scan

cedric-martz/cve-2025-36911_scan

This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911.

bluetooth-securityexploitationinformation-gathering+3

47 months ago

whisper-pair

ap425q/whisper-pair

Scans Bluetooth Low Energy devices for Fast Pair vulnerabilities (CVE-2025-36911), testing if accessories accept unencrypted Key-Based Pairing…

bluetooth-securityexploitationhardware-iot-security+3

27 months ago

HikPwn

4n4nk3/hikpwn

Passive and active scanner for Hikvision devices with ICSA-17-124-01 vulnerability detection and exploitation, enabling device enumeration and admin…

exploitationinformation-gatheringiot-security+2

1294 years ago

CVE-2019-0708-Check-Device-Patch-Status

fourtwizzy/cve-2019-0708-check-device-patch-status

PowerShell script to check if a remote device is patched against CVE-2019-0708 by verifying termdd.sys file version against Microsoft's May 2019…

exploitationinformation-gatheringpenetration-testing+3

186 years ago

mikrotik0dayScanner

m1tn1ck/mikrotik0dayscanner

Scanner for Mikrotik RouterOS 0day credential disclosure via Winbox interface. Exploits improper authentication on port 8291/TCP to download user…

authenticationexploitationinformation-gathering+2

67 years ago

conscryptchecker

roeeh/conscryptchecker

This app verifies if your device is still vulnerable to CVE-2015-3825 / CVE-2015-3837, aka "One Class to Rule Them All", by checking if it contains…

android-securitymobile-securityvulnerability-analysis+1

410 years ago

snmpvlan

ehabhussein/snmpvlan

SNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…

configuration-auditingexploitationnetwork-security+2

411 years ago

sunsetscan

nocoderrandom/sunsetscan

Local-network security auditing with EOL, CVE, device identity, and HTML reports

configuration-auditinginformation-gatheringiot-security+4

32 months ago

-CVE-2025-8088

pescada-dev/-cve-2025-8088

POWERSHEL script to check if your device is affected or no

educationexploitationscripting-automation+2

10 years ago

Mobile-Drop-Device-SOC-Detection

v3ng4mxv1p3r/mobile-drop-device-soc-detection

End-to-end simulation of detecting a root-less Android Drop Device (Casper) using Wazuh SIEM to capture Layer 7 attacks like Shellshock…

educationexploitationincident-response+6

14 months ago

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-device

Step-by-step guide for deploying Microsoft Defender for Endpoint on Windows 10/11, including local script onboarding, device discovery, Log4j2…

configuration-auditingdefensive-toolseducation+4

11 months ago

CVE-2023-20198-Fix

netbell/cve-2023-20198-fix

Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198

configuration-auditingdevsecopsexploitation+3

2 years ago

CVE-2024-23113

iambrayden/cve-2024-23113

This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE.

exploitationinformation-gatheringnetwork-security+2

1 year ago

GDA-android-reversing-Tool

charles2gan/gda-android-reversing-tool

Native C++ Dalvik bytecode decompiler for APK/DEX/ODEX/OAT/JAR/AAR/CLASS files. Performs malicious behavior detection, privacy leak scanning,…

android-securityctfdynamic-analysis-sandboxing+9

4.8k4 months ago

A2SV--SSL-VUL-Scan

anthophilee/a2sv--ssl-vul-scan

Automated SSL/TLS vulnerability scanner that detects Heartbleed, POODLE, FREAK, DROWN, and other known CVEs, with a simple command-line interface for…

encryption-decryption-toolsexploitationnetwork-security+3

55 years ago

ssh-audit

arthepsy/ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

configuration-auditingnetwork-securitypenetration-testing+1

3.0k2 years ago

urgent11-detector

armissecurity/urgent11-detector

Network-based scanner that identifies devices running Interpeak IPnet TCP/IP stack to detect URGENT/11 vulnerabilities using TCP and ICMP…

embedded-systems-securityinformation-gatheringiot-security+5

646 years ago

Previous12 Next