Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

360 results

XSSCon

menkrep1337/xsscon

XSSCon: Simple XSS Scanner tool

crawlervulnerability-scannersweb-security+1

2477 years ago

Shelly

tegal1337/shelly

Simple Backdoor Manager with Python (based on weevely)

payload-generationpenetration-testingremote-access-tool+1

961 year ago

feroxbuster

epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

api-securityapi-security-testingcrawler+8

8.1k23 days ago

ShellShockHunter

mrcl0wnlab/shellshockhunter

It's a simple tool for test vulnerability shellshock

exploitationpenetration-testingvulnerability-scanners+1

1245 years ago

magicRecon

robotshell/magicrecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this…

dns-analysisinformation-gatheringosint+7

1.1k2 years ago

ppmap

kleiton0x00/ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

exploitationpenetration-testingvulnerability-scanners+2

5204 years ago

erebus

ethicalhackingplayground/erebus

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

fuzzingpenetration-testingvulnerability-scanners+4

1345 years ago

TheDoc

offxec/thedoc

Automates SQL injection exploitation with SQLMAP, crawls for vulnerabilities, extracts database credentials, finds admin login pages, and cracks…

information-gatheringpassword-crackingvulnerability-scanners+1

978 years ago

wodat

initroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1

794 years ago

SQLiDetector

eslam3kl/sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14…

penetration-testingvulnerability-scannersweb-security+1

6441 day ago

wshlient

gildasio/wshlient

A simple tool to interact with web shells and command injection vulnerabilities

command-and-controlpenetration-testingshellcode+1

371 year ago

rengine

yogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

crawlerdns-subdomain-enumerationinformation-gathering+9

8.9k10 months ago

Archived

nginxpwner

stark0de/nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

information-gatheringmisconfigurationpenetration-testing+3

1.6k2 years ago

Archived

Wordpresscan

swisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

information-gatheringpassword-attacksreconnaissance+3

6515 years ago

Archived

explo

telekom-security/explo

Human and machine readable web vulnerability testing format

penetration-testingscripting-automationvulnerability-analysis+2

1934 years ago

Archived

InjuredAndroid

b3nac/injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

android-securityctfeducation+5

7615 years ago

Archived

CVE-2025-54589

bytereaper77/cve-2025-54589

PoC for CVE-2025-54589 – a reflected XSS vulnerability in Copyparty ≤ 1.18.6.

exploitationpenetration-testingvulnerability-analysis+2

21 year ago

Archived

Webmin_Exploit_reverse_shell

bytereaper77/webmin_exploit_reverse_shell

A simple C-based vulnerability in Webmin versions 1.890 to 1.920

binary-exploitationexploitationpayload-development+4

21 year ago

Previous 1…1920Next