Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
24 results
send preview

send

GitHubfastify/send

Node.js library for streaming files as HTTP responses with support for partial content, conditional requests, and configurable caching headers.…

general-purpose-utilitiesutilities-frameworksweb-security
153 days ago
sish preview

sish

GitHubantoniomika/sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

general-purpose-utilitiesnetwork-securityutilities-frameworks+1
4.8k5 days ago
goproxy preview

goproxy

GitHubelazarl/goproxy

A customizable HTTP/HTTPS proxy library for Go supporting regular forwarding, CONNECT tunneling, MITM TLS interception, and programmatic…

general-purpose-utilitiesnetwork-securityweb-proxies-interception+1
6.8k10 days ago
lua-resty-limit-traffic preview

lua-resty-limit-traffic

GitHubopenresty/lua-resty-limit-traffic

Lua library for limiting and controlling traffic in OpenResty/ngx_lua

anti-botdefensive-toolsgeneral-purpose-utilities+1
85522 days ago
unauthscout preview

unauthscout

GitHubrmottanet/unauthscout

UnauthScout is an OSINT (Open Source Intelligence) tool developed in Bash for passive exploration of assets on version control platforms (GitLab and…

code-analysisgeneral-purpose-utilitiesosint+2
48 months ago
pagesource preview

pagesource

GitHubtimf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3
3599 months ago
pwl preview
Archived

pwl

GitHubwkovacs64/pwl

Password Lense: reveal character types in a password

authenticationgeneral-purpose-utilitiespassword-attacks+3
2311 months ago
vert-x3__vertx-web_CVE-2019-17640_3-9-3 preview

vert-x3__vertx-web_CVE-2019-17640_3-9-3

GitHubshoucheng3/vert-x3__vertx-web_cve-2019-17640_3-9-3

Analysis and exploitation code for CVE-2019-17640, a vulnerability in Vert.x-Web. Provides a targeted test case for security researchers validating…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
1 year ago
xwiki__xwiki-rendering_CVE-2023-37908_14-10-3 preview

xwiki__xwiki-rendering_CVE-2023-37908_14-10-3

GitHubshoucheng3/xwiki__xwiki-rendering_cve-2023-37908_14-10-3

Generic wiki/HTML rendering system that converts textual input between syntaxes (wiki, HTML, XHTML). This repository contains a patched version…

code-analysisgeneral-purpose-utilitiesvulnerability-analysis+1
1 year ago
url-status-checker preview

url-status-checker

GitHubblack-scorp10/url-status-checker

Async Python CLI tool for bulk URL status checking with color-coded HTTP response categorization, IP tracking, and redirect following for web service…

general-purpose-utilitiesinformation-gatheringweb-security
511 year ago
Sub-folderFetcher preview

Sub-folderFetcher

GitHubalmandev/sub-folderfetcher

A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.

exploitationgeneral-purpose-utilitiesscripting-automation+2
1 year ago
jetty_9.4.31_CVE-2023-26048 preview

jetty_9.4.31_CVE-2023-26048

GitHubtrinadh465/jetty_9.4.31_cve-2023-26048

Repository dedicated to the analysis and exploitation of CVE-2023-26048 in Jetty 9.4.31, providing vulnerability research and proof-of-concept code…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
2 years ago
jetty_9.4.31_CVE-2021-34428 preview

jetty_9.4.31_CVE-2021-34428

GitHubtrinadh465/jetty_9.4.31_cve-2021-34428

Repository dedicated to CVE-2021-34428, a vulnerability in Jetty 9.4.31. Provides a patched or vulnerable version for analysis and testing of the…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
2 years ago
CVE-2023-38545 preview

CVE-2023-38545

GitHubbcdannyboy/cve-2023-38545

A proof of concept for testing CVE-2023-38545 against local curl

exploitationgeneral-purpose-utilitiesnetwork-security+3
42 years ago
url-regex-safe preview

url-regex-safe

GitHubspamscanner/url-regex-safe

Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661 for Node.js servers.

general-purpose-utilitiesscripting-automationstatic-analysis+2
813 years ago
study-turbolinks-link preview

study-turbolinks-link

GitHubusutani/study-turbolinks-link

Known security vulnerabilities detected. CVE-2022-21831 Critical severity CVE-2025-24293 Critical severity CVE-2020-8162 High severity CVE-2024-26144…

general-purpose-utilitiesvulnerability-analysisweb-security
3 years ago
qsreplace preview

qsreplace

GitHubtomnomnom/qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

general-purpose-utilitiesutilities-frameworksweb-security
8864 years ago
external_curl_AOSP10_r33_CVE-2021-22924 preview

external_curl_AOSP10_r33_CVE-2021-22924

GitHubtrinadh465/external_curl_aosp10_r33_cve-2021-22924

Command-line tool and library for transferring data using URL syntax, supporting various protocols including HTTP, FTP, and more.

general-purpose-utilitiesnetwork-securityscripting-automation+2
4 years ago
Previous12Next