Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
144 results
log4jScan preview

log4jScan

GitHubsinakeshmiri/log4jscan

simple python scanner to check if your network is vulnerable to CVE-2021-44228

exploitationnetwork-mappingpenetration-testing+2
44 years ago
CVE-2022-36663-PoC preview

CVE-2022-36663-PoC

GitHubaqeisi/cve-2022-36663-poc

Internal network scanner through Gluu IAM blind ssrf

network-mappingport-scanningreconnaissance+2
23 years ago
Multi-VLAN-Enterprise-Network-Vulnerability-Assessment preview

Multi-VLAN-Enterprise-Network-Vulnerability-Assessment

GitHubklairmanraj/multi-vlan-enterprise-network-vulnerability-assessment

Multi-VLAN enterprise network vulnerability assessment using Nessus, OWASP ZAP, and Wireshark. Confirms Stored XSS on WebGoat and EternalBlue…

exploitationnetwork-mappingnetwork-security+6
6 months ago
seccubus preview

seccubus

GitHubseccubus/seccubus

Easy automated vulnerability scanning, reporting and analysis

defensive-toolslog-analysisnetwork-mapping+5
7087 years ago
rainmap-lite preview

rainmap-lite

GitHubcldrn/rainmap-lite

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

network-mappingport-scanningvulnerability-scanners+1
2335 years ago
CVE-2020-6308-PoC preview

CVE-2020-6308-PoC

GitHubinitroot/cve-2020-6308-poc

PoC CVE-2020-6308

exploitationnetwork-mappingpenetration-testing+3
365 years ago
CVE-2025-5349-Scanner preview

CVE-2025-5349-Scanner

GitHubolimpiofreitas/cve-2025-5349-scanner

Python-based scanner for CVE-2025-5349 that probes IP ranges and hosts on HTTP/HTTPS ports to detect vulnerable Citrix NetScaler instances.

exploitationnetwork-mappingpenetration-testing+3
11 year ago
CVE-2022-1388 preview

CVE-2022-1388

GitHubm4fiab0y/cve-2022-1388

Scan IP ranges for IP's vulnerable to the F5 Big IP exploit (CVE-2022-1388)

exploitationnetwork-mappingreconnaissance+2
3 years ago
Review.CVE-2023-5612 preview

Review.CVE-2023-5612

GitHubconstantinefedorov/review.cve-2023-5612

Proof-of-concept and analysis for CVE-2023-5612, a GitLab CE/EE webhook SSRF. Includes curl PoC steps and custom NSE scripts to verify and…

exploitationnetwork-mappingpenetration-testing+4
1 year ago
UA3F preview

UA3F

GitHubsunbk201/ua3f

Transparent HTTP(S) rewriting proxy supporting HTTP, SOCKS5, TPROXY, REDIRECT and NFQUEUE modes with HTTPS MitM, rule-based header/body rewriting and…

anti-botnetwork-mappingnetwork-security+5
68925 days ago
web-scanner preview

web-scanner

GitHubcapture0x/web-scanner

Python-based web domain scanner integrating Sublist3r, Dirble, Nmap, and WhatWeb for subdomain discovery, directory enumeration, network scanning,…

information-gatheringnetwork-mappingreconnaissance+3
226 months ago
insightsnexus preview

insightsnexus

GitHubcyberintel-labs/insightsnexus

OSINT Graph Investigation Application

curated-resourcesdns-subdomain-enumerationeducation+7
3410 months ago
Sitadel preview

Sitadel

GitHubshenril/sitadel

Web Application Security Scanner

information-gatheringpenetration-testingvulnerability-scanners+3
61117 days ago
ahmia-site preview

ahmia-site

GitHubahmia/ahmia-site

Django-based search engine and crawler stack that indexes .onion hidden services on the Tor network, providing searchable metadata for dark web…

crawlerinformation-gatheringosint+3
79023 days ago
rustbuster preview

rustbuster

GitHubphra/rustbuster

A Comprehensive Web Fuzzer and Content Discovery Tool

dns-subdomain-enumerationfuzzinginformation-gathering+2
5605 years ago
WordList preview

WordList

GitHubrix4uni/wordlist

Curated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…

dns-subdomain-enumerationfuzzinginformation-gathering+6
15416 days ago
filebuster preview

filebuster

GitHubhenshin/filebuster

An extremely fast and flexible web fuzzer

fuzzinginformation-gatheringpenetration-testing+1
2233 years ago
Bountystrike-sh preview

Bountystrike-sh

GitHubbountystrike/bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
2903 years ago
Previous12…8Next