Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
129 results
Galaxy-Bugbounty-Checklist preview

Galaxy-Bugbounty-Checklist

GitHub0xmaximus/galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

curated-resourceseducationosint+3
2.1k
10 months ago
Sudomy preview

Sudomy

GitHubscreetsec/sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting /…

dns-analysisinformation-gatheringosint+5
2.4k2 years ago
weaponised-XSS-payloads preview

weaponised-XSS-payloads

GitHubhakluke/weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

exploitationpayload-developmentpayload-generation+3
1.4k2 years ago
DBShield preview

DBShield

GitHubnim4/dbshield

Database firewall written in Go

anomaly-detectiondatabase-securitydefensive-tools+1
6848 years ago
semgrep-rules preview

semgrep-rules

GitHubelttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6
24521 days ago
ReconPi preview

ReconPi

GitHubx1mdev/reconpi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

dns-analysisinformation-gatheringpenetration-testing+5
7255 years ago
recox preview

recox

GitHubsamhaxr/recox

Master script for web reconnaissance

information-gatheringpenetration-testingreconnaissance+3
3372 years ago
Horn3t preview

Horn3t

GitHubjanniskirschner/horn3t

Powerful Visual Subdomain Enumeration at the Click of a Mouse

information-gatheringpenetration-testingreconnaissance+2
1387 years ago
PAVELOW preview

PAVELOW

GitHuboffxec/pavelow

PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess…

exploit-frameworksinformation-gatheringosint+7
908 years ago
bug-reaper preview

bug-reaper

GitHubshaniidev/bug-reaper

Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.

api-security-testingctfeducation+8
676 months ago
r3con preview

r3con

GitHubthenurhabib/r3con

Multi-functional Web Recon & Vulnerability Scanner Tool

crawlerdns-analysisinformation-gathering+5
344 years ago
vibe-coding-security preview

vibe-coding-security

GitHubboxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

ai-securityapi-securityauthentication+9
1411 days ago
liferay-ga4-rce-research preview

liferay-ga4-rce-research

GitHubdinosn/liferay-ga4-rce-research

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…

dynamic-analysis-sandboxingexploitationpapers-research+6
623 days ago
CVE-2026-3629 preview

CVE-2026-3629

GitHubpysectools/cve-2026-3629

WordPress Privilege Escalation Checker

exploitationpenetration-testingprivilege-escalation+3
93 months ago
CVE-2025-65640 preview

CVE-2025-65640

GitHubvincenzo-emanuele/cve-2025-65640

Public advisory for CVE-2025-65640: Stored XSS vulnerability in Globe Document Intelligence.

educationpapers-researchpenetration-testing+3
102 months ago
CVE-2026-14856-TastyIgniter preview

CVE-2026-14856-TastyIgniter

GitHubjonas-fernandez-as/cve-2026-14856-tastyigniter

CVE-2026-14856 TastyIgniter v4.3.0

educationexploitationpenetration-testing+3
23 days ago
CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection preview

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

GitHubgeorge0papasotiriou/cve-2026-5432-graphql-batching-alias-confusion-sql-injection
api-security-testingdata-exfiltrationexploitation+3
18 days ago
CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover- preview

CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-

GitHubgeorge0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-
api-securityauthentication-authorizationexploitation+3
18 days ago
Previous1…345…8Next