Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
5129 results
wpbf preview

wpbf

GitHubatarantini/wpbf

Remotely test password strength of WordPress bloging software

information-gatheringpassword-attackspenetration-testing+3
107
10 years ago
FarsightAD preview

FarsightAD

GitHubqazeer/farsightad

PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain…

forensicsincident-responseinformation-gathering+5
988 months ago
adexplorersnapshot-rs preview

adexplorersnapshot-rs

GitHubt94j0/adexplorersnapshot-rs

Converts Active Directory Explorer snapshot (.dat) files into BloodHound CE JSON archives for graph-based AD attack-path analysis and reconnaissance.

identity-access-managementinformation-gatheringpenetration-testing+1
974 months ago
Bugs-feed preview
Archived

Bugs-feed

GitHubpwnedshell/bugs-feed

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

crawlerinformation-gatheringosint+2
934 years ago
LACheck preview

LACheck

GitHubmitchmoser/lacheck

Multithreaded C# .NET assembly for enumerating local administrative privileges across Windows hosts via SMB, WMI, and WinRM, with BloodHound…

information-gatheringlateral-movementpenetration-testing+3
935 years ago
cygor preview

cygor

GitHubtjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7
882 months ago
x18-leak preview

x18-leak

GitHubbazad/x18-leak

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

binary-exploitationexploitationinformation-gathering+2
878 years ago
syd preview

syd

GitHubsydsec/syd

Offline AI Security Assistant for Air-Gapped Pentesting

ai-securityexploitationforensics+8
874 months ago
reverie preview

reverie

GitHubbaguswiratmaadi/reverie

Automated Pentest Tools Designed For Parrot Linux

information-gatheringpenetration-testingvulnerability-scanners
837 years ago
recon preview

recon

GitHubknowledge-wisdom-understanding/recon

Enumerate a target Based off of Nmap Results

ctfdns-analysisdns-subdomain-enumeration+9
762 years ago
Invoke-Transfer preview

Invoke-Transfer

GitHubjoelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…

data-exfiltrationosintpenetration-testing+2
738 months ago
MetadataPlus preview

MetadataPlus

GitHubnccgroup/metadataplus

A tool to use novel locations to extract metadata from Office documents.

digital-forensicsforensicsinformation-gathering+1
643 years ago
Cooper preview

Cooper

GitHubchrismaddalena/cooper

A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.

information-gatheringphishingphishing-tools+2
602 months ago
CVE-2019-2888 preview

CVE-2019-2888

GitHubjas502n/cve-2019-2888

WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)

exploitationinformation-gatheringpenetration-testing+2
596 years ago
gitls preview
Archived

gitls

GitHubhahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

information-gatheringosintpenetration-testing+2
571 year ago
iotmap preview

iotmap

GitHubalgosecure/iotmap

Research project on heterogeneous IoT protocols modelling

information-gatheringiot-securitynetwork-mapping
546 years ago
cve-2016-1764 preview

cve-2016-1764

GitHubmoloch--/cve-2016-1764

Extraction of iMessage Data via XSS

data-exfiltrationexploitationinformation-gathering+4
5110 years ago
wordreaper preview

wordreaper

GitHubnemorous/wordreaper

📜 Scrape targeted wordlists for password cracking using CSS selectors

crawlerctfinformation-gathering+5
515 months ago
Previous1…949596…100Next