Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
97 results
satellite preview

satellite

GitHubt94j0/satellite

easy-to-use payload hosting

payload-generationred-teamingweb-security
2844 years ago
haptyc preview

haptyc

GitHubdefparam/haptyc

Python library for Turbo Intruder that adds payload position support and Sniper/Clusterbomb/Pitchfork attack types with tag-based test generation for…

fuzzingpayload-generationpenetration-testing+1
934 years ago
ZIPFileRaider preview

ZIPFileRaider

GitHubdestine21/zipfileraider

ZIP File Raider - Burp Extension for ZIP File Payload Testing

fuzzingpayload-generationpenetration-testing+2
715 years ago
CVE-2025-1015 preview

CVE-2025-1015

GitHubr3m0t3nu11/cve-2025-1015

an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…

exploitationpayload-generationphishing-tools+3
31 year ago
CVE-2023-44758_GDidees-CMS-Stored-XSS---Title preview

CVE-2023-44758_GDidees-CMS-Stored-XSS---Title

GitHubsromanhu/cve-2023-44758_gdidees-cms-stored-xss---title

GDidees CMS 3.9.2 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to…

exploitationpayload-generationpenetration-testing+3
2 years ago
CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias preview

CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

GitHubsromanhu/cve-2023-44769_zenariocms--reflected-xss---alias

Zenariocms 9.4.59197 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload…

exploitationpayload-generationpenetration-testing+3
2 years ago
Pluck-CMS-Stored-XSS---Installation preview

Pluck-CMS-Stored-XSS---Installation

GitHubsromanhu/pluck-cms-stored-xss---installation

pluck CMS 4.7.18 is affected by a Multiple Stored Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a…

payload-generationpenetration-testingred-teaming+3
2 years ago
HackTools preview

HackTools

GitHublascc/hacktools

The all-in-one browser extension for offensive security professionals 🛠

payload-generationpenetration-testingweb-security
7.0k1 year ago
MalQR.github.io preview

MalQR.github.io

GitHubmalqr/malqr.github.io

MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.

fuzzingpayload-generationpenetration-testing+1
1274 years ago
CVE-2025-7441 preview

CVE-2025-7441

GitHubanothersec/cve-2025-7441

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

exploitationpayload-generationpenetration-testing+3
32 months ago
w3-total-cache-cve-2013-2010 preview

w3-total-cache-cve-2013-2010

GitHubspyata123/w3-total-cache-cve-2013-2010

Remote code execution running on w3 total cache cve 2013-2010

exploitationpayload-generationpenetration-testing+3
1 year ago
MAGNOLIA-8348 preview

MAGNOLIA-8348

GitHubmbadanoiu/magnolia-8348

MAGNOLIA-8348: FreeMarker Restriction Bypass 3 in Magnolia CMS

exploitationpayload-generationpenetration-testing+3
2 years ago
CVE-2022-44268-fixed-PoC preview

CVE-2022-44268-fixed-PoC

GitHubcygnusx-26/cve-2022-44268-fixed-poc
exploitationpayload-generationvulnerability-analysis+1
2 years ago
xssor2 preview

xssor2

GitHubevilcos/xssor2

XSS'OR - Hack with JavaScript.

payload-generationpenetration-testingweb-security
2.2k6 years ago
evilarc preview

evilarc

GitHubptoomey3/evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

exploitationpayload-generationpenetration-testing+4
1.1k5 years ago
recollapse preview

recollapse

GitHub0xacb/recollapse

Black-box regex fuzzing tool that generates payloads to bypass input validations, discover normalizations, and evade WAFs in web applications.

fuzzingpayload-generationwaf-bypass+1
1.4k1 year ago
Upload_Bypass preview

Upload_Bypass

GitHubsajibuu/upload_bypass

A simple tool for bypassing file upload restrictions.

exploitationpayload-generationpenetration-testing+2
9082 years ago
sqlmap-ai preview

sqlmap-ai

GitHubatiilla/sqlmap-ai

This script automates SQL injection testing using SQLMap with AI-powered decision making.

payload-generationpenetration-testingvulnerability-scanners+3
4456 months ago
Previous123456Next