Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
68 results
APIHarvester preview

APIHarvester

GitHubpiratesshield/apiharvester

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

api-securityapi-security-testingcrawler+9
35
3 months ago
XXERipper preview

XXERipper

GitHubkamalx06/xxeripper

Black-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…

api-security-testingdata-exfiltrationexploitation+9
131 month ago
awesome-blackhat-arsenal preview

awesome-blackhat-arsenal

GitHubelbraino/awesome-blackhat-arsenal

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

curated-resourcesdefensive-toolsinformation-gathering+8
1921 month ago
emba preview

emba

GitHube-m-b-a/emba

EMBA - The firmware security analyzer

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+8
3.6k1 day ago
InfoSec-Black-Friday preview

InfoSec-Black-Friday

GitHub0x90n/infosec-black-friday

All the deals for InfoSec related software/tools this Black Friday

cloud-securitycurated-resourceseducation+9
4.4k11 months ago
drAFL preview

drAFL

GitHubmxmssh/drafl

AFL + DynamoRIO = fuzzing binaries with no source code on Linux

binary-analysisdynamic-analysis-sandboxingexploitation+1
2497 years ago
Jackalope preview

Jackalope

GitHubgoogleprojectzero/jackalope

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

binary-analysisdebuggersdynamic-analysis-sandboxing+6
1.4k2 months ago
APKDeepLens preview

APKDeepLens

GitHubd78ui98/apkdeeplens

Android security insights in full spectrum.

android-securitycode-analysiscryptography+5
1.0k5 months ago
recollapse preview

recollapse

GitHub0xacb/recollapse

Black-box regex fuzzing tool that generates payloads to bypass input validations, discover normalizations, and evade WAFs in web applications.

fuzzingpayload-generationwaf-bypass+1
1.4k1 year ago
phantomdrive preview

phantomdrive

GitHubo7-machinehum/phantomdrive

Seemingly normal USB drive with a hidden security feature

cryptographydata-recoveryembedded-systems-security+3
7165 days ago
ODPure preview

ODPure

GitHubalex66366/odpure

Black-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…

adversarial-attackai-securitydefensive-tools+4
21 month ago
blackhat-python3 preview

blackhat-python3

GitHubeonraider/blackhat-python3

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

code-analysiscryptographyeducation+8
2.4k3 years ago
xsser preview

xsser

GitHubvarbaek/xsser

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

exploitationpayload-developmentpenetration-testing+3
4246 years ago
InfoSec-Black-Friday preview
Archived

InfoSec-Black-Friday

GitHubwwwiesel/infosec-black-friday

All the deals for InfoSec related software/tools this Black Friday

ctfcurated-resourceseducation+3
26411 months ago
pi-hole preview

pi-hole

GitHubpi-hole/pi-hole

A black hole for Internet advertisements

dns-analysisnetwork-securityprivacy+1
60.3k18 days ago
Conferences preview

Conferences

GitHubonhexgroup/conferences

Conference presentation slides

curated-resourceseducationpapers-research
2.4k2 months ago
dns-black-cat preview

dns-black-cat

GitHubzux0x3a/dns-black-cat

Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode…

command-and-controldata-exfiltrationdns-analysis+3
1134 years ago
ddossnake preview

ddossnake

GitLabvqkro/ddossnake

Go load and stress testing tool with L7 HTTP and L4 raw TCP/UDP modes, multi-threaded workers, live rate graph, and a Windows GUI plus cross-platform…

command-and-controlnetwork-securitypenetration-testing+2
112 days ago
Previous1234Next