Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

14 results

fsociety

manisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

exploitationinformation-gatheringpassword-attacks+6

12.4k3 months ago

XSS-LOADER

capture0x/xss-loader

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

payload-generationpenetration-testingwaf-bypass+2

6256 months ago

LFI-FINDER

capture0x/lfi-finder

Automated scanner for detecting Local File Inclusion (LFI) vulnerabilities in web applications by analyzing URLs and testing payloads via geckodriver.

vulnerability-scannersweb-application-exploitationweb-security

3042 years ago

SSRFire

ksharinarayanan/ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

information-gatheringvulnerability-scannersweb-application-exploitation+1

9654 years ago

TheDoc

offxec/thedoc

Automates SQL injection exploitation with SQLMAP, crawls for vulnerabilities, extracts database credentials, finds admin login pages, and cracks…

information-gatheringpassword-crackingvulnerability-scanners+1

978 years ago

admin-panel-finder

bdblackhat/admin-panel-finder

Python script to discover admin panel URLs of websites, aiding in security reconnaissance and penetration testing.

information-gatheringpenetration-testingreconnaissance+2

19513 years ago

CVE-2023-41508

redblueteam/cve-2023-41508

CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

authenticationexploitationmisconfiguration+3

13 years ago

CVE-2025-5947_Exploit

m4rgs/cve-2025-5947_exploit

An mini exploit for the Service Finder -Bookings plugin WP

educationexploitationpenetration-testing+3

11 year ago

CVE-2025-54322

sachinart/cve-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick

exploitationpenetration-testingreconnaissance+3

810 months ago

Open-Redirect-Finder

jenderal92/open-redirect-finder

Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL.

penetration-testingvulnerability-analysisvulnerability-scanners+2

5 months ago

CVE-2026-44011-craftcms-auth-rce

4xura/cve-2026-44011-craftcms-auth-rce

The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user.

command-and-controlexploitationpenetration-testing+5

61 month ago

CVE-2025-5947

xxconi/cve-2025-5947

CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit

authentication-authorizationexploitationpenetration-testing+3

5 months ago

CVE-2023-41507

redblueteam/cve-2023-41507

CVE-2023-41507 A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

exploitationinformation-gatheringpenetration-testing+2

3 years ago

CVE-2015-2794-finder

wilsc0w/cve-2015-2794-finder

CVE-2015-2794 auto finder

exploitationinformation-gatheringpenetration-testing+2

7 years ago