Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2902 results

EasyScan

0xdevrel/easyscan

Python-based web security scanner that analyzes HTTP headers, SSL/TLS, DNS records, and common misconfigurations to generate a scored security report…

dns-analysisinformation-gatheringmisconfiguration+2

151

4 months ago

CVE-2018-6389

omidsec/cve-2018-6389

PoC Exploit CVE-2018-6389

exploitationinformation-gatheringpenetration-testing+2

79 months ago

HttpStrike

k3ystr0k3r/httpstrike

DDoS script meant to flood websites.

network-securitypenetration-testingred-teaming+2

53 years ago

OSTE-Web-Log-Analyzer

ostesayed/oste-web-log-analyzer

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

anomaly-detectionintrusion-detectionlog-analysis+2

442 years ago

woocommerce_scanner

tdawg506/woocommerce_scanner

A Python script designed to scan a list of WordPress sites to identify those with WooCommerce installed and check if they are vulnerable to…

information-gatheringreconnaissancevulnerability-scanners+1

11 months ago

slowloris

gkbrk/slowloris

Low bandwidth DoS tool. Slowloris rewrite in Python.

penetration-testingweb-security

2.8k3 years ago

log4j-detect

takito1812/log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

exploitationvulnerability-scannersweb-security

1954 years ago

Clickjacking-Tester

d4vinci/clickjacking-tester

A python script designed to check if the website if vulnerable of clickjacking and create a poc

exploitationpenetration-testingvulnerability-scanners+2

1599 years ago

log4j-urlscanner

woahd/log4j-urlscanner

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

dns-analysisexploitationinformation-gathering+3

14 years ago

Detect_polyfill_CVE-2024-38537-

havoc10-sw/detect_polyfill_cve-2024-38537-

Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.

api-security-testingconfiguration-auditingmisconfiguration+2

2 years ago

Archived

Injectus

dubs3c/injectus

CRLF and open redirect fuzzer

fuzzinginformation-gatheringpenetration-testing+3

1135 years ago

Archived

sub404

r3curs1v3-pr0xy/sub404

A python tool to check subdomain takeover vulnerability

dns-analysispenetration-testingreconnaissance+3

3533 years ago

CVE-2026-38361

a1ohadance/cve-2026-38361

Advisory: CVE-2026-38361 multiple DoS vulnerabilities (CWE-400/CWE-670) in dash-uploader (Python/PyPI)

educationexploitationpenetration-testing+2

4 months ago

git-dump

jenderal92/git-dump

This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and…

information-gatheringmisconfigurationpenetration-testing+3

13 months ago

CVE-2025-31324

jonathanstross/cve-2025-31324

A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of…

information-gatheringioc-managementpenetration-testing+3

11 year ago

PoC---CVE-2018-6389

alessiogilardi/poc---cve-2018-6389

Proof-of-concept exploit for CVE-2018-6389, a WordPress DoS vulnerability, with a multi-threaded Python DoS tool for unauthenticated remote attacks.

exploitationpenetration-testingvulnerability-analysis+2

7 years ago

CVE-2021-43798-poc

rnsss/cve-2021-43798-poc

Proof-of-concept exploit for Grafana 8.x arbitrary file read vulnerability (CVE-2021-43798), allowing retrieval of sensitive files via crafted URL.

exploitationinformation-gatheringpenetration-testing+2

4 years ago

Remote-Integer-Overflow-Vulnerability

insecrez/remote-integer-overflow-vulnerability

Added Vulnerability Code in Python for Nginx Vulnerability (CVE-2017-7529)

exploitationinformation-gatheringpenetration-testing+3

5 years ago

Previous 1…345…100 Next