Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
CVE-2017-9476 preview

CVE-2017-9476

GitHubwiire-a/cve-2017-9476

Hidden AP with Deterministic Credentials

exploitationhardware-iot-securitypassword-cracking+3
9
8 years ago
hcxtools preview

hcxtools

GitHubzerbea/hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

hash-analysispassword-crackingpenetration-testing-frameworks+2
2.4k5 days ago
marfil preview

marfil

GitHubpupi1985/marfil

Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running…

password-crackingpenetration-testingwi-fi-auditing
5510 years ago
Auto_EAP preview

Auto_EAP

GitHubtylous/auto_eap

Automated Brute-Force Login Attacks Against EAP Networks.

password-attackspenetration-testingwi-fi-auditing+1
586 years ago
wifi-bruteforcer-fsecurify preview

wifi-bruteforcer-fsecurify

GitHubfaizann24/wifi-bruteforcer-fsecurify

Android application to brute force WiFi passwords without requiring a rooted device.

android-securitymobile-securitypassword-attacks+1
1.5k7 years ago
reaver-wps-fork-t6x preview

reaver-wps-fork-t6x

GitHubt6x/reaver-wps-fork-t6x

Brute-force attack tool against WPS registrar PINs to recover WPA/WPA2 passphrases, supporting online brute force and offline Pixie Dust attacks on…

exploitationpassword-attackswi-fi-auditing+1
2.0k9 months ago
airbash preview

airbash

GitHubtehw0lf/airbash

A POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing

password-crackingpenetration-testingvulnerability-analysis+1
3700 years ago
Pyrit preview

Pyrit

GitHubjpaulmora/pyrit

The famous WPA precomputed cracker, Migrated from Google.

cryptographypassword-crackingwi-fi-auditing+1
1.1k2 years ago
WiFiBroot preview

WiFiBroot

GitHubhash3lizer/wifibroot

A Wireless (WPA/WPA2) Pentest/Cracking tool. Captures & Crack 4-way handshake and PMKID key. Also, supports a deauthentication/jammer mode for stress…

password-crackingpenetration-testingwi-fi-auditing+1
1.1k5 years ago
wacker preview

wacker

GitHubblunderbuss-wctf/wacker

A WPA3 dictionary cracker

password-crackingpenetration-testingwi-fi-auditing+1
3753 years ago
assless-chaps preview

assless-chaps

GitHubsensepost/assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

cryptographyhash-analysispassword-cracking+2
14127 days ago
pmkidcracker preview

pmkidcracker

GitHubn0mi1k/pmkidcracker

A tool to crack WPA2 passphrase with PMKID value without clients or de-authentication

password-crackingpenetration-testingwi-fi-auditing+1
2343 years ago
AirStrike preview

AirStrike

GitHubredcode-labs/airstrike

Automatically grab and crack WPA-2 handshakes with distributed client-server architecture

password-crackingpenetration-testingwi-fi-auditing+1
1994 years ago