Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1851 results

CVE-2026-39987

alreadyclosed/cve-2026-39987

CVE-2026-39987 for marimo 0.20.4 PoC

ctfeducationexploitation+2

26 days ago

CVE-2021-43008-AdminerRead

p0dalirius/cve-2021-43008-adminerread

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

exploitationinformation-gatheringpenetration-testing+3

852 years ago

CVE-2021-44228

shamo0/cve-2021-44228

log4shell (CVE-2021-44228) scanning tool

exploitationinformation-gatheringreconnaissance+3

44 years ago

r2s

zamdevio/r2s

Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF…

command-and-controlexploitationinformation-gathering+5

29 months ago

goWAPT

dzonerzy/gowapt

Go Web Application Penetration Test

fuzzingpenetration-testingscripting-automation+4

3451 year ago

backcookie

jofpin/backcookie

Small backdoor using cookie.

command-and-controlpayload-generationpenetration-testing+3

649 years ago

Klyda

hcbaker/klyda

Highly configurable script for dictionary/spray attacks against online web applications.

information-gatheringpassword-attackspenetration-testing+1

513 years ago

CVE-2016-10956-mail-masta

p0dalirius/cve-2016-10956-mail-masta

MailMasta wordpress plugin Local File Inclusion vulnerability (CVE-2016-10956)

exploitationinformation-gatheringpenetration-testing+3

214 years ago

vcenter_saml_login

horizon3ai/vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

authentication-authorizationcloud-infrastructure-securityexploitation+4

5293 years ago

padding-oracle-attacker

kishanbagaria/padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

cryptographyencryption-decryption-toolsexploitation+1

2174 years ago

laravel-crypto-killer

synacktiv/laravel-crypto-killer

A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

encryption-decryption-toolsexploitationpayload-generation+2

1468 months ago

grafanaExp

a-d-team/grafanaexp

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt…

encryption-decryption-toolsexploitationinformation-gathering+3

27010 months ago

pinky

davidtavarez/pinky

pinky - The PHP mini RAT (Remote Administration Tool)

command-and-controlencryption-decryption-toolspayload-generation+6

767 years ago

AspDotNetWrapper-Edited-

orwagodfather/aspdotnetwrapper-edited-

This Tool To Test Machine Keys In View State

encryption-decryption-toolspenetration-testingvulnerability-analysis+2

881 year ago

dp_cryptomg

blacklanternsecurity/dp_cryptomg

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

cryptographyexploitationpenetration-testing+3

605 months ago

dotnetpaddingoracle

nccgroup/dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

cryptographyencryption-decryption-toolsexploitation+3

3110 years ago

fb-phisher-python

arjunindia/fb-phisher-python

A python server tool based on flask , this tool can phish some Facebook credentials!

phishingphishing-toolssocial-engineering+1

177 years ago

CVE-2019-7238_Nexus_RCE_Tool

magicming200/cve-2019-7238_nexus_rce_tool

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

command-and-controlexploitationpenetration-testing+3

246 years ago

Previous12…100 Next