Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

7426 results

EvilNeko

corvralabs/evilneko

Automated container orchestration tool for Browser-in-the-Browser (BITB) phishing attacks, enabling red teams to scale multi-target infrastructure…

container-securitypenetration-testingphishing+3

8 months ago

Moxy

matank001/moxy

Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities…

ai-securityapi-security-testingdynamic-analysis-sandboxing+9

1247 months ago

TProxer

ethicalhackingplayground/tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

api-security-testingpenetration-testingvulnerability-analysis+2

1844 years ago

CVE-2022-42889-Text4Shell-POC

alealeluyah/cve-2022-42889-text4shell-poc

This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id:…

exploitationpayload-generationpenetration-testing+2

133 years ago

CVE-2022-0739

chris01s/cve-2022-0739

Simple bash script to automate the exploit of cve 2022 0739

exploitationpenetration-testingvulnerability-analysis+1

43 years ago

CVE-2026-23723-POC

ch35h1r3c47/cve-2026-23723-poc

This is a lightweight Python helper script designed to automate the generation of sqlmap-compatible PoC files for the authenticated error-based SQL…

exploitationpenetration-testingvulnerability-analysis+1

37 months ago

CVE-2021-29447

thomas-osgood/cve-2021-29447

A Golang program to automate the execution of CVE-2021-29447

educationexploitationpenetration-testing+2

33 years ago

CVE-2023-4220-PoC

sn0wbaall/cve-2023-4220-poc

Automated proof-of-concept exploit for CVE-2023-4220 in Chamilo LMS, enabling arbitrary file upload and remote code execution via unauthenticated…

exploitationpayload-generationpenetration-testing+3

7 months ago

CVE-2023-3452-PoC

leoanggal1/cve-2023-3452-poc

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

exploitationpayload-generationpenetration-testing+3

172 years ago

CVE-2020-6308

themmmdev/cve-2020-6308

Exploit script for SAP Business Objects SSRF

exploitationpenetration-testingred-teaming+2

15 years ago

CVE-2024-23334-PoC

sn0wbaall/cve-2024-23334-poc

Automated proof-of-concept exploit for CVE-2024-23334, a path traversal vulnerability in aiohttp, enabling remote directory traversal and…

ctfeducationexploitation+3

7 months ago

CVE-2019-13063-POC

0x6b7966/cve-2019-13063-poc

Proof of concept tool to exploit the directory traversal and local file inclusion vulnerability that resides in the Sahi-pro web application…

exploitationinformation-gatheringpenetration-testing+2

7 years ago

jboss-_CVE-2017-12149

mre-fog/jboss-_cve-2017-12149

Java-based command-line tool to verify the presence of CVE-2017-12149 in JBoss servers by sending crafted requests and checking for a specific…

exploitationpenetration-testingvulnerability-analysis+2

3 years ago

CVE-2022-4616-POC

ahanel13/cve-2022-4616-poc

This Python script aids in exploiting CVE-2022-46169 by automating payload delivery and response handling. It starts an HTTP server, listens for…

educationexploitationpayload-generation+2

3 years ago

wordpress-bf

randomrobbiebf/wordpress-bf

Brute Force Wordpress Blogs.

authentication-authorizationinformation-gatheringpassword-attacks+2

6 years ago

CVE-2024-34327

0xsu3ks/cve-2024-34327

Proof-of-concept checker for time-based blind SQL injection in password-reset-token.php; sends crafted POST requests and detects delayed responses…

educationexploitationpenetration-testing+2

1 year ago

Archived

NekoBotV1

tegal1337/nekobotv1

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

exploit-frameworkspenetration-testingred-teaming+2

3965 years ago

pulse-gosecure-rce-poc

withdk/pulse-gosecure-rce-poc

Tool to test for existence of CVE-2020-8218

command-and-controlexploitationpenetration-testing+3

216 years ago

Previous12…100 Next