Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
37 results
dj preview

dj

GitHubejfkdev/dj

Extracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source…

anti-botcrawlerfingerprint-spoofing+7
609 days ago
trawl preview

trawl

GitHubgermondai/trawl

Self-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr…

anti-botcaptcha-bypasscrawler+5
94110 days ago
Wildfire preview

Wildfire

GitHubdefineid/wildfire

CVE-2026-39154, Stored XSS in CometChat JS SDK

api-securityexploitationpayload-development+4
1 month ago
XSSFire preview

XSSFire

GitHubseifelsallamy/xssfire

A standalone Blind XSS Script.

data-exfiltrationexploitationinformation-gathering+3
471 year ago
WebSafeCompiler preview

WebSafeCompiler

GitHubdosx-dev/websafecompiler

A powerfull websites compiler/obfuscator for optimization or intellectual property protection purposes.

encryption-decryption-toolsgeneral-purpose-utilitiesscripting-automation+2
1601 year ago
Gemini-api-key-hunter preview

Gemini-api-key-hunter

GitHubcoffinxp/gemini-api-key-hunter

Scans websites and JS files for exposed Gemini API keys, verifies them live, enumerates accessible services, and provides a browser client for direct…

api-securitycloud-securityinformation-gathering+5
732 months ago
cve-2024-4367-poc preview

cve-2024-4367-poc

GitHubanomalousvectors/cve-2024-4367-poc

POC for PDF JS' CVE-2024-4367 vuln

exploitationpayload-generationvulnerability-analysis+1
21 year ago
js-jobs preview

js-jobs

GitHubrandomrobbiebf/js-jobs

JS Job Manager < 1.1.9 - Unauthenticated Arbitrary Plugin Installation/Activation

exploitationpenetration-testingvulnerability-analysis+2
3 years ago
Ios-Safari-Mallicous-Extension-Example preview

Ios-Safari-Mallicous-Extension-Example

GitHubspiralbl0ck/ios-safari-mallicous-extension-example

Example on how to injection(currently under work) of keylogger js through Safari Extension(that part done)

exploitationinformation-gatheringios-security+3
2 years ago
JS-Secret-Hunter preview

JS-Secret-Hunter

GitHubsohelyousef/js-secret-hunter

Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.

crawlerinformation-gatheringpenetration-testing+3
8 months ago
CVE-2018-6389 preview

CVE-2018-6389

GitHubomidsec/cve-2018-6389

PoC Exploit CVE-2018-6389

exploitationinformation-gatheringpenetration-testing+2
710 months ago
url-regex-safe preview

url-regex-safe

GitHubspamscanner/url-regex-safe

Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661 for Node.js servers.

general-purpose-utilitiesscripting-automationstatic-analysis+2
813 years ago
CVE-2024-28397-js2py-Sandbox-Escape preview

CVE-2024-28397-js2py-Sandbox-Escape

GitHubnaved124/cve-2024-28397-js2py-sandbox-escape

Detailed analysis of CVE-2024-28397, a sandbox escape vulnerability in js2py enabling RCE via Python object traversal. Includes code analysis, PoC,…

binary-exploitationcode-analysiseducation+5
11 year ago
CVE-2022-23861 preview

CVE-2022-23861

GitHubmbadanoiu/cve-2022-23861

CVE-2022-23861: Multiple Stored Cross-Site Scripting in YSoft SafeQ

exploitationpenetration-testingvulnerability-analysis+2
12 years ago
reverse-skill preview

reverse-skill

GitHubzhaoxuya520/reverse-skill

AI-powered skill router pack for reverse engineering, penetration testing, and security research. Routes AI agents to correct methodologies and…

ai-securitybinary-analysisctf+8
40.1k16 days ago
CVE-2025-63700 preview

CVE-2025-63700

GitHubitsnishat08/cve-2025-63700

Technical documentation and proof-of-concept for CVE-2025-63700, an OAuth authentication bypass vulnerability in Clerk-js 5.88.0 allowing…

authentication-authorizationexploitationpenetration-testing+2
110 months ago
CVE-2022-31298 preview

CVE-2022-31298

GitHubbigzooooz/cve-2022-31298

Haraj Script 3.7 - Authenticated Stored XSS

exploitationpenetration-testingvulnerability-analysis+2
14 years ago
CVE-2017-7038 preview

CVE-2017-7038

GitHubansjdnakjdnajkd/cve-2017-7038

Safari XSS (CVE-2017-7038) https://support.apple.com/en-us/HT207923

exploitationpenetration-testingvulnerability-analysis+2
38 years ago
Previous123Next