Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

390 results

vuln-scanner

zappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

api-security-testingcloud-securityconfiguration-auditing+9

111 day ago

reSolver

theqmaks/resolver

This extension integrates popular CAPTCHA solution services into BurpSuite to process different types of CAPTCHAs without manual intervention.

anti-botapi-security-testingcaptcha-bypass+5

147 months ago

Archived

purpleteam-app-scanner

purpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam

api-security-testingcloud-securitydevsecops+4

15 years ago

ffuf

ffuf/ffuf

Fast web fuzzer written in Go

api-securityapi-security-testingcrawler+12

16.8k3 days ago

Http11Probe

mda2av/http11probe

An open testing platform that probes HTTP/1.1 servers against RFC 9110/9112 requirements, smuggling vectors, and malformed input handling. Add your…

api-security-testingfuzzingmisconfiguration+2

306 days ago

gaia

functori/dev/gaia

Global API Integrity Assessor

api-security-testingfuzzingvulnerability-scanners+1

1 year ago

ReconNote

0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

information-gatheringpenetration-testingreconnaissance+3

4115 years ago

CVE2026-42926

ikarolaborda/cve2026-42926

Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research

configuration-auditingdefensive-toolseducation+3

3 months ago

Poc-CVE-2025-9519

nimisha17/poc-cve-2025-9519

Proof-of-concept exploit for CVE-2025-9519, demonstrating remote code execution in WordPress Easy Timer plugin via a crafted shortcode filter, with…

exploitationpenetration-testingvulnerability-analysis+2

211 months ago

Scanners-Box

we5ter/scanners-box

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

ai-securitybinary-analysiscurated-resources+6

9.1k1 day ago

CVE-2023-7172

sharathc213/cve-2023-7172

Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…

educationexploitationlabs-practice+3

62 years ago

domain-locker

lissy93/domain-locker

Centralized domain portfolio manager with auto-fetched WHOIS, DNS, SSL data, expiry alerts, uptime monitoring, and visual analytics. Self-hostable…

web-security

1.5k5 days ago

studio

shipsecai/studio

Workflow automation for Security Teams

cloud-securitydevsecopseducation+7

3807 months ago

webdiscover

v1n1v131r4/webdiscover

The purpose of this script is to automate the web enumeration process and search for exploits

exploit-frameworksreconnaissancevulnerability-scanners+1

1174 years ago

ctf-screenshotter

liveoverflow/ctf-screenshotter

CTF web challenge simulating a real-world screenshotting vulnerability, with Docker setup and video writeup for hands-on security education.

ctfeducationlabs-practice+1

2245 years ago

Forbidden-Buster

sn1r/forbidden-buster

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the…

fuzzingids-ips-evasionpenetration-testing+2

2522 years ago

grapheneX

graphenex/graphenex

Automated System Hardening Framework

cloud-securityconfiguration-auditingdefensive-tools+2

1.1k2 years ago

CVE-2026-48060

blinky-keys/cve-2026-48060

Proof-of-concept exploit and vulnerable application demonstrating an HTML injection vulnerability in Litestar 2.21.0 via CSRF token, with Docker…

exploitationpenetration-testingvulnerability-analysis+2

1 month ago

Previous 1…345…22 Next