Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
48 results
JShunter preview

JShunter

GitHubcc1a2b/jshunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

api-securitydynamic-code-analysispenetration-testing+6
532
18 days ago
Learn-Web-Hacking preview

Learn-Web-Hacking

GitHublylemi/learn-web-hacking

Structured study notes covering web hacking fundamentals, common vulnerabilities, penetration testing techniques, and defensive security, with…

curated-resourceseducationlearning-paths-courses+2
5.5k9 days ago
Bug-Bounty-Beginner-Roadmap preview

Bug-Bounty-Beginner-Roadmap

GitHubbittentech/bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

ctfcurated-resourceseducation+7
2.4k2 years ago
theftfuzzer preview

theftfuzzer

GitHublc/theftfuzzer

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

fuzzingmisconfigurationvulnerability-scanners+1
3196 years ago
CVE-2025-34291_cors_security_scanner preview

CVE-2025-34291_cors_security_scanner

GitHubamnnrth/cve-2025-34291_cors_security_scanner

A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing (CORS) misconfigurations - CVE-2025-34291.

api-security-testingmisconfigurationpenetration-testing+3
3 months ago
CORStest preview

CORStest

GitHubrub-nds/corstest

A simple CORS misconfiguration scanner

misconfigurationpenetration-testingvulnerability-scanners+1
4246 years ago
corsair_scan preview

corsair_scan

GitHubsantandersecurityresearch/corsair_scan

Automated CORS misconfiguration scanner that tests Origin header injection, wildcard reflection, and credential leakage across web applications and…

api-security-testingmisconfigurationvulnerability-scanners+1
1225 years ago
CorsMe preview

CorsMe

GitHubshivangx01b/corsme

Cross Origin Resource Sharing MisConfiguration Scanner

misconfigurationpenetration-testingvulnerability-scanners+1
1705 years ago
lorsrf preview

lorsrf

GitHubmindpatch/lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

fuzzingpenetration-testingvulnerability-scanners+1
2971 year ago
all-my-collection-repos preview

all-my-collection-repos

GitHubalphaseclab/all-my-collection-repos

All Security Resource Collections Repos That I Published.

curated-resourceseducationforensics+6
1346 years ago
Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 preview

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467

GitHubgraysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467

This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…

authenticationexploitationpenetration-testing+3
12 years ago
-CVE-2024-39614 preview

-CVE-2024-39614

GitHubabdurahmon3236/-cve-2024-39614

Proof-of-concept for CVE-2024-39614, a Django denial-of-service vulnerability. Demonstrates resource exhaustion via long strings in…

exploitationpenetration-testingvulnerability-analysis+1
2 years ago
cve-2024-38819-lab preview

cve-2024-38819-lab

GitHubtrevorputbrese/cve-2024-38819-lab

Hands-on lab demonstrating CVE-2024-38819 Spring Framework path traversal vulnerability with vulnerable and patched Spring Boot deployments for…

educationlabs-practicemisconfiguration+3
2 months ago
Bug-Bounty preview

Bug-Bounty

GitHubzapstiko/bug-bounty

Here Are Some Bug Bounty Resource From Twitter

curated-resourceseducationpenetration-testing+3
13318 days ago
XSSight preview

XSSight

GitHubnu11secur1ty/xssight

Educational resource on Cross-site Scripting (XSS) attack techniques, covering non-persistent, persistent, and DOM-based vectors with practical…

educationinformation-gatheringpenetration-testing+3
105 months ago
CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS preview

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

GitHubgeorge0papasotiriou/cve-2026-11118-http-2-rapid-reset-ddos

Python PoC for CVE-2026-11118 demonstrating HTTP/2 Rapid Reset DDoS via RST_STREAM resource exhaustion; includes vulnerable server simulator and…

exploitationnetwork-securityvulnerability-analysis+1
27 days ago
Log4j_CVE-2021-44228 preview

Log4j_CVE-2021-44228

GitHubvorburger/log4j_cve-2021-44228

Curated resource hub for Log4j CVE-2021-44228, covering detection, mitigation, exploitation, and dependency management strategies for the critical…

curated-resourceseducationexploitation+3
34 years ago
mitigate-cve-2026-23869-react-server-component-loops preview

mitigate-cve-2026-23869-react-server-component-loops

GitHubshaheryar773/mitigate-cve-2026-23869-react-server-component-loops

Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.

cloud-securityeducationmisconfiguration+2
1 month ago
Previous123Next