Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
755 results
Exploit-Index preview

Exploit-Index

GitHubsecurewithumer/exploit-index

The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat…

curated-resourcesexploitationinformation-gathering+8
64
3 days ago
MISP preview

MISP

GitHubmisp/misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

curated-resourcesdatabase-securitydefensive-tools+10
6.6k8 days ago
sqlmap preview

sqlmap

GitHubsqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

api-securityapi-security-testingcrawler+12
38.6k2 days ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.7k2 days ago
shodan preview

shodan

GitHublothos612/shodan

Shodan Dorks

curated-resourcesdatabase-securityinformation-gathering+7
6023 years ago
Windows-RCE-exploits preview

Windows-RCE-exploits

GitHubsmgorelik/windows-rce-exploits

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are…

educationexploitationexploit-frameworks+2
7452 years ago
Exploits + Shellcode + GHDB preview

Exploits + Shellcode + GHDB

GitLabexploit-database/exploitdb

exploitdb // The official Exploit-Database repository

curated-resourceseducationexploitation+7
2616 days ago
wpscan preview

wpscan

GitHubwpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

crawlerdynamic-code-analysisinformation-gathering+7
9.8k9 days ago
metasploit-framework preview

metasploit-framework

GitHubrapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controldatabase-securitydata-exfiltration+20
39.1k12h 11m ago
advisory-database preview

advisory-database

GitHubpypa/advisory-database

Community-owned database of security advisories for Python packages on PyPI, providing structured vulnerability data in OSV format for integration…

curated-resourcesdevsecopssupply-chain-security+2
3725 days ago
Common-Vulnerability-and-Exploit preview

Common-Vulnerability-and-Exploit

GitHubdonaldashdown/common-vulnerability-and-exploit

This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach.

educationexploitationpenetration-testing+2
8 years ago
custom-oscp-tooling preview

custom-oscp-tooling

GitLabwattocyber/custom-oscp-tooling

OSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…

database-securitydns-analysishash-analysis+9
1 month ago
chatlog preview

chatlog

GitHubsjzar/chatlog

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

database-securityforensicsinformation-gathering+1
9.2k11 months ago
CVE-2026-PoCs preview

CVE-2026-PoCs

GitHubsecurewithumer/cve-2026-pocs

The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat…

curated-resourceseducationexploitation+5
750 days ago
theZoo preview

theZoo

GitHubytisf/thezoo

Curated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…

curated-resourcesdynamic-analysis-sandboxingeducation+3
13.4k23 days ago
the-bastion preview

the-bastion

GitHubovh/the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

authentication-authorizationconfiguration-auditingidentity-access-management+4
2.2k8 days ago
ruby-advisory-db preview

ruby-advisory-db

GitHubrubysec/ruby-advisory-db

Community-maintained database of security advisories for Ruby gems and runtimes, providing structured CVE/GHSA data with patched versions for…

curated-resourceseducationpapers-research+2
1.1k8 days ago
sshelf preview

sshelf

GitHubmax-rh/sshelf

Fast terminal UI for your SSH hosts: fuzzy-search and connect in two keystrokes, dual-pane SFTP file transfer, and background port forwarding. Keeps…

authenticationgeneral-purpose-utilitiesnetwork-security+2
7523 days ago
Previous12…42Next