Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
167 results
magicRecon preview

magicRecon

GitHubrobotshell/magicrecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this…

dns-analysisinformation-gatheringosint+7
1.1k
2 years ago
gotestwaf preview

gotestwaf

GitHubwallarm/gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

api-securityapi-security-testingpenetration-testing+4
1.8k1 year ago
CVE-2024-2997 preview

CVE-2024-2997

GitHubo9-9/cve-2024-2997

The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…

command-and-controlexploitationpenetration-testing+3
1 year ago
CVE-2024-2997 preview

CVE-2024-2997

GitHublfillaz/cve-2024-2997

The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…

educationexploitationpenetration-testing+3
111 year ago
CVE-2024-2997 preview

CVE-2024-2997

GitHub0xuho/cve-2024-2997

The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…

educationexploitationpenetration-testing+3
5 months ago
scant3r preview

scant3r

GitHubmindpatch/scant3r

Module-based web vulnerability scanner and bug bounty automation framework with built-in XSS, SSTI, SSRF, and Firebase detection engines. Designed to…

penetration-testingscripting-automationvulnerability-scanners+2
68623 days ago
apache-vulnerability-testing preview

apache-vulnerability-testing

GitHubmrmtwoj/apache-vulnerability-testing

Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 ,…

exploitationpenetration-testingvulnerability-analysis+3
1351 year ago
CVE-2025-30208 preview

CVE-2025-30208

GitHubxuemian168/cve-2025-30208

全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner

exploitationinformation-gatheringreconnaissance+3
471 year ago
CVE-2026-27886 preview

CVE-2026-27886

GitHubevtdanya/cve-2026-27886

Strapi CVE-2026-27886. Leaking sensitive data via relational filtering due to lack of query sanitization

api-security-testingexploitationpenetration-testing+3
2 months ago
Automated-Next.js-Security-Scanner-for-CVE-2025-29927 preview

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

GitHubferpalma21/automated-next.js-security-scanner-for-cve-2025-29927

This script scans a list of URLs to detect if they are using **Next.js** and determines whether they are vulnerable to **CVE-2025-29927**. It…

exploitationinformation-gatheringreconnaissance+3
21 year ago
BurpSentinel preview

BurpSentinel

GitHubdobin/burpsentinel

GUI Burp Plugin to ease discovering of security holes in web applications

dynamic-code-analysispenetration-testingvulnerability-analysis+3
1539 years ago
extended-xss-search preview

extended-xss-search

GitHubdamian89/extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

information-gatheringpenetration-testingvulnerability-scanners+2
1897 years ago
CVE-2024-12084 preview

CVE-2024-12084

GitHubrxerium/cve-2024-12084

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths…

exploitationinformation-gatheringpenetration-testing+3
110 months ago
optionsbleed preview

optionsbleed

GitHubhannob/optionsbleed
vulnerability-scannersweb-securityweb-vulnerability-scanners
1476 years ago
zap-api-rust preview

zap-api-rust

GitHubzaproxy/zap-api-rust
api-securitypenetration-testingvulnerability-scanners+3
152 years ago
react2shell-scanner preview

react2shell-scanner

GitHubshield-cyber/react2shell-scanner

Scanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.

exploitationinformation-gatheringpenetration-testing+3
18 months ago
Livewire2025CVE preview

Livewire2025CVE

GitHube4zyy/livewire2025cve

Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into…

information-gatheringvulnerability-analysisvulnerability-scanners+2
37 months ago
sqlifinder preview

sqlifinder

GitHubamerico/sqlifinder

SQL Injection Vulnerability Scanner made with Python

vulnerability-scannersweb-securityweb-vulnerability-scanners
3944 months ago
Previous123…10Next