Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
cve-2026-20127 preview

cve-2026-20127

GitHubgigachadusers/cve-2026-20127

Windows-based C++ network scanner that fingerprints Cisco SD-WAN/vManage services and checks for CVE-2026-20127 exposure via HTTP endpoint analysis.

information-gatheringnetwork-securitypenetration-testing+2
2
5 months ago
semgrep-rules preview

semgrep-rules

GitHubelttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6
2461 month ago
detectXSSlib preview

detectXSSlib

GitHubgwroblew/detectxsslib

C++ library for detecting cross-site scripting (XSS) vulnerabilities in URLs through pattern analysis, with server modules and command-line tools for…

code-analysispenetration-testingstatic-analysis+3
3113 years ago
ShellShock-CGI-Scan preview

ShellShock-CGI-Scan

GitHubproclnas/shellshock-cgi-scan

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug)

exploitationpenetration-testingvulnerability-scanners+2
111 years ago
ShellShock-CGI-Scan preview

ShellShock-CGI-Scan

GitHubp0cl4bs/shellshock-cgi-scan

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug).

exploitationpenetration-testingvulnerability-scanners+2
611 years ago
HTTP-Basma preview

HTTP-Basma

GitHubnetomize/http-basma

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

command-and-controlinformation-gatheringmalware-analysis+6
1 month ago
CVE-2023-23752 preview

CVE-2023-23752

GitHubshellvik/cve-2023-23752

Joomla Information disclosure exploit code written in C++.

exploitationinformation-gatheringpenetration-testing+2
2 years ago
CVE-2025-68461 preview

CVE-2025-68461

GitHubgotr00t0day/cve-2025-68461

A C++ security scanner tool to detect Cross-Site Scripting (XSS) vulnerabilities in Roundcube Webmail installations.

information-gatheringpenetration-testingreconnaissance+3
69 months ago
rbuster preview

rbuster

GitHubsmirnovvad/rbuster

yet another dirbuster

fuzzinginformation-gatheringpenetration-testing+1
185 years ago
lulzbuster preview

lulzbuster

GitHubnoptrix/lulzbuster

A multithreaded, very fast and smart HTTP(S) directory and file bruteforcer written in C on top of libcurl

fuzzinginformation-gatheringpenetration-testing+3
1412 months ago
snuffleupagus preview

snuffleupagus

GitHubjvoisin/snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

code-analysisdefensive-toolsmisconfiguration+2
83720 days ago
route-sixty-sink preview
Archived

route-sixty-sink

GitHubmandiant/route-sixty-sink

Link sources to sinks in C# applications.

binary-analysiscode-analysisstatic-analysis+3
1493 years ago
Gxss preview
Archived

Gxss

GitHubkathanp19/gxss

A tool to check a bunch of URLs that contain reflecting params.

information-gatheringpenetration-testingreconnaissance+2
6022 years ago