Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
116 results
LogMePwn preview

LogMePwn

GitHub0xinfection/logmepwn

A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

exploitationfuzzingnetwork-mapping+3
395
29 days ago
citrix-netscaler-memory-leak preview

citrix-netscaler-memory-leak

GitHubcappricio-securities/citrix-netscaler-memory-leak

Citrix Netscaler ADC & Gateway v13.1-50.23 - Out-Of-Bounds Memory Read

network-securitypenetration-testingvulnerability-scanners+2
22 years ago
cms-exploitation-campaign preview

cms-exploitation-campaign

GitHubrxerium/cms-exploitation-campaign

Large Scale Exploitation Campaign against CMS devices reported in July 2026

defensive-toolsintrusion-detectionthreat-intelligence+4
31 month ago
CVE-2025-55182-scanner preview

CVE-2025-55182-scanner

GitHubyaupunal/cve-2025-55182-scanner

CVE-2025-55182-scanner with 2 different method

defensive-toolsids-ips-evasionmisconfiguration+3
8 months ago
gotestwaf preview

gotestwaf

GitHubwallarm/gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

api-securityapi-security-testingpenetration-testing+4
1.8k1 year ago
bugbounty_tools preview

bugbounty_tools

GitHubdawgyg/bugbounty_tools

Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and…

information-gatheringreconnaissancesubdomain-enumeration+3
1528 months ago
p4wned preview

p4wned

GitHubflyingllama87/p4wned

Perforce security research and tools - CVE-2026-6043

exploitationexploit-frameworksinformation-gathering+6
22 months ago
ronin preview

ronin

GitHubronin-rb/ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…

cryptographyctfdns-analysis+8
7557 months ago
WAES preview

WAES

GitHubshiva108/waes

CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result

ctfeducationinformation-gathering+7
707 months ago
legion preview
Archived

legion

GitHubabacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

container-securityexploitationids-ips-evasion+8
1.1k1 year ago
wp2shell-rce preview

wp2shell-rce

GitHubjohnlodan/wp2shell-rce

WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.

penetration-testingreconnaissancevulnerability-analysis+4
316 days ago
XSS2Shell-CVE-2026-64638 preview

XSS2Shell-CVE-2026-64638

GitHubmr-leonardogomes/xss2shell-cve-2026-64638

WordPress security scanner that fingerprints versions, detects reflected XSS across multiple targets concurrently, and supports an authenticated…

exploitationpenetration-testingreconnaissance+3
111 days ago
CVE-2025-0133 preview

CVE-2025-0133

GitHubinteleon404/cve-2025-0133

Reflected XSS vulnerability found in Palo Alto GlobalProtect Gateway & Portal. Attackers can inject malicious scripts via crafted requests.

exploitationpenetration-testingreconnaissance+3
101 year ago
n8n-vulnerability-detection preview

n8n-vulnerability-detection

GitHubrxerium/n8n-vulnerability-detection

Vulnerability detection scripts for the n8n product.

penetration-testingreconnaissancethreat-intelligence+3
17 months ago
laravel-ignition-Rxss preview

laravel-ignition-Rxss

GitHubcappricio-securities/laravel-ignition-rxss

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.

penetration-testingreconnaissancevulnerability-scanners+2
2 years ago
Zeus-Scanner preview

Zeus-Scanner

GitHubekultek/zeus-scanner

Advanced reconnaissance utility

captcha-bypassinformation-gatheringport-scanning+4
9987 years ago
CVE-2025-61882-CVE-2025-61884 preview

CVE-2025-61882-CVE-2025-61884

GitHubrxerium/cve-2025-61882-cve-2025-61884

Detection for CVE-2025-61882 & CVE-2025-61884

misconfigurationpenetration-testingvulnerability-scanners+2
3510 months ago
CVE-2025-55183-poc preview

CVE-2025-55183-poc

GitHubkimtruth/cve-2025-55183-poc

PoC for CVE-2025-55183

code-analysisexploitationpenetration-testing+3
78 months ago
Previous1234567Next