Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
Ominis-OSINT preview

Ominis-OSINT

GitHubanoncatalyst/ominis-osint

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…

crawlerinformation-gatheringosint+3
644
20h 5m ago
Breacher preview

Breacher

GitHubs0md3v/breacher

An advanced multithreaded admin panel finder written in python.

information-gatheringvulnerability-scannersweb-security
8476 years ago
SSRFire preview

SSRFire

GitHubksharinarayanan/ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

information-gatheringvulnerability-scannersweb-application-exploitation+1
9654 years ago
cangibrina preview

cangibrina

GitHubfnk0c/cangibrina

A fast and powerfull dashboard (admin) finder

information-gatheringreconnaissancevulnerability-scanners+1
2397 years ago
tachyon preview

tachyon

GitHubdelvelabs/tachyon

Fast http dead file finder.

information-gatheringreconnaissancevulnerability-scanners+1
2213 months ago
CVE-2025-5947 preview

CVE-2025-5947

GitHubxxconi/cve-2025-5947

CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit

authentication-authorizationexploitationpenetration-testing+3
5 months ago
Open-Redirect-Finder preview

Open-Redirect-Finder

GitHubjenderal92/open-redirect-finder

Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL.

penetration-testingvulnerability-analysisvulnerability-scanners+2
5 months ago
laf preview
Archived

laf

GitHubtakeshixx/laf

Login Area Finder: scans host/s for login panels

information-gatheringpenetration-testingreconnaissance+2
1412 years ago
php-malware-finder preview

php-malware-finder

GitHubnbs-system/php-malware-finder

YARA-based scanner that detects obfuscated PHP malware and webshells using semantic pattern matching instead of file hashes, with a whitelist system…

malware-analysisstatic-analysisvulnerability-scanners+1
3464 years ago
elite-proxy-finder preview

elite-proxy-finder

GitHubdanmcinerney/elite-proxy-finder

Finds public elite anonymity proxies and concurrently tests them

information-gatheringnetwork-securityprivacy+3
25210 years ago
admin-panel-finder preview

admin-panel-finder

GitHubbdblackhat/admin-panel-finder

Python script to discover admin panel URLs of websites, aiding in security reconnaissance and penetration testing.

information-gatheringpenetration-testingreconnaissance+2
19513 years ago
LFI-FINDER preview

LFI-FINDER

GitHubcapture0x/lfi-finder

Automated scanner for detecting Local File Inclusion (LFI) vulnerabilities in web applications by analyzing URLs and testing payloads via geckodriver.

vulnerability-scannersweb-application-exploitationweb-security
3042 years ago
Lfi-Space preview

Lfi-Space

GitHubcapture0x/lfi-space

Automated Local File Inclusion (LFI) vulnerability scanner with Google Dork search and targeted URL scan modes for web application security testing.

information-gatheringpenetration-testingvulnerability-scanners+1
1126 months ago
PathFinder preview

PathFinder

GitHubhalildeniz/pathfinder

Python-based web reconnaissance tool that extracts site metadata, DNS records, subdomains, firewall names, technologies, and certificate details for…

information-gatheringosintreconnaissance+1
602 years ago
CVE-2026-44011-craftcms-auth-rce preview

CVE-2026-44011-craftcms-auth-rce

GitHub4xura/cve-2026-44011-craftcms-auth-rce

The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user.

command-and-controlexploitationpenetration-testing+5
61 month ago
php-malware-finder preview
Archived

php-malware-finder

GitHubjvoisin/php-malware-finder

Detect potentially malicious PHP files

code-analysismalware-analysisstatic-analysis+2
1.5k3 years ago