Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13165 results
NekoBotV1 preview
Archived

NekoBotV1

GitHubtegal1337/nekobotv1

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

vulnerability-scannersexploit-frameworksweb-application-exploitation+2
395
5 years ago
InjuredAndroid preview
Archived

InjuredAndroid

GitHubb3nac/injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

android-securityvulnerability-analysismobile-app-pentesting+5
7625 years ago
xmlrpc-bruteforcer preview
Archived

xmlrpc-bruteforcer

GitHubkavishgr/xmlrpc-bruteforcer

An XMLRPC brute forcer targeting Wordpress written in Python 3. (DISCONTINUED)

password-attacksweb-application-exploitationinformation-gathering+2
631 year ago
FDsploit preview
Archived

FDsploit

GitHubchrispetrou/fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

vulnerability-scannersexploitationweb-application-exploitation+3
2735 years ago
naxsi preview
Archived

naxsi

GitHubnbs-system/naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

vulnerability-scannersids-ips-evasionweb-application-exploitation+3
4.8k2 years ago
SQLiScanner preview
Archived

SQLiScanner

GitHub0xbug/sqliscanner

Automatic SQL injection with Charles and sqlmap api

vulnerability-scannersweb-application-exploitationweb-security+2
8248 years ago
explo preview
Archived

explo

GitHubtelekom-security/explo

Human and machine readable web vulnerability testing format

vulnerability-analysisscripting-automationweb-application-exploitation+2
1953 years ago
novahot preview
Archived

novahot

GitHubchrisallenlane/novahot

A webshell framework for penetration testers.

exploit-frameworkspayload-generationweb-application-exploitation+3
2991 year ago
leviathan preview
Archived

leviathan

GitHubutkusen/leviathan

wide range mass audit toolkit

password-crackingreconnaissancevulnerability-scanners+6
1.0k7 years ago
GoldenEye preview
Archived

GoldenEye

GitHubjseidl/goldeneye

GoldenEye Layer 7 (KeepAlive+NoCache) DoS Test Tool

general-purpose-utilitiesids-ips-evasionweb-application-exploitation+2
1.5k2 years ago
hackazon preview
Archived

hackazon

GitHubrapid7/hackazon

A modern vulnerable web app

vulnerability-scannersweb-application-exploitationapi-security-testing+3
1.0k5 years ago
macro_pack preview
Archived

macro_pack

GitHubsevagas/macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

phishing-toolsexploit-frameworkspayload-generation+6
2.3k2 years ago
wildPwn preview
Archived

wildPwn

GitHubhlldz/wildpwn

Brute forcer and shell deployer for WildFly

vulnerability-analysisexploitationweb-application-exploitation+1
978 years ago
WLT3Serial preview
Archived

WLT3Serial

GitHubbort-millipede/wlt3serial

Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.

payload-generationvulnerability-analysisexploitation+2
346 years ago
Radium preview
Archived

Radium

GitHubmehulj94/radium

Python logger with multiple features.

password-crackingphishing-toolspersistence-mechanisms+7
5255 years ago
vbscan preview
Archived

vbscan

GitHubowasp/vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

vulnerability-scannersexploitationweb-application-exploitation+3
3277 years ago
parameth preview
Archived

parameth

GitHubmak-/parameth

This tool can be used to brute discover GET and POST parameters

reconnaissancevulnerability-analysisweb-application-exploitation+3
1.4k6 years ago
DKMC preview
Archived

DKMC

GitHubmr-un1k0d3r/dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

payload-generationshellcodeweb-application-exploitation+3
1.4k6 years ago
Previous1…730731732Next