Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
655 results
SharpToken preview

SharpToken

GitHubbeichendream/sharptoken

Windows token theft and privilege escalation tool that steals leaked tokens from processes, enables SYSTEM-level access, user impersonation, and…

lateral-movementpost-exploitationprivilege-escalation+1
493
2 years ago
THERE-IS-A-CVE preview

THERE-IS-A-CVE

GitHubransomwares/there-is-a-cve

Pentesting tool integrating Shodan for IP reconnaissance and CVE identification, with Metasploit and Exploit-DB integration for automated exploit…

exploit-frameworksinformation-gatheringpenetration-testing+1
122 years ago
mubeng preview

mubeng

GitHubmubeng/mubeng

An incredibly fast proxy checker & IP rotator with ease.

web-proxies-interception
2.7k1 month ago
shlol preview

shlol

GitHubandreiverse/shlol

do common hacking tasks with a simple menu

payload-generationpenetration-testingred-teaming+1
45 years ago
quasar preview

quasar

GitHubcyb0r9/quasar

Modular information gathering framework for penetration testers, featuring website analysis, email/phone lookup, credit card BIN checking, IP…

information-gatheringosintpenetration-testing+2
1677 years ago
Pip-Intel preview

Pip-Intel

GitHubemrekybs/pip-intel

Modular OSINT tool that aggregates email, phone, IP, and social media intelligence via pip packages. Automates data collection and analysis for…

information-gatheringosintosint-social-engineering+1
2452 years ago
CVE-2024-6387-Vulnerability-Checker preview

CVE-2024-6387-Vulnerability-Checker

GitHubfilipi86/cve-2024-6387-vulnerability-checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports.…

exploitationnetwork-securityvulnerability-scanners
1022 years ago
netlas-cookbook preview

netlas-cookbook

GitHubnetlas-io/netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…

curated-resourcesdigital-forensicseducation+9
89223 days ago
CamXploit preview

CamXploit

GitHubspyboy-productions/camxploit

Security reconnaissance and assessment tool for identifying potentially exposed IP cameras by analyzing open ports, service configurations, and…

information-gatheringiot-securitynetwork-mapping+4
1.2k9 months ago
url-status-checker preview

url-status-checker

GitHubblack-scorp10/url-status-checker

Async Python CLI tool for bulk URL status checking with color-coded HTTP response categorization, IP tracking, and redirect following for web service…

general-purpose-utilitiesinformation-gatheringweb-security
511 year ago
SSH-Private-Key-Looting-Wordlists preview

SSH-Private-Key-Looting-Wordlists

GitHubpinoywh1z/ssh-private-key-looting-wordlists

Curated wordlists for brute-forcing SSH private key filenames, aiding penetration testers in locating keys via LFI or enumeration during lateral…

lateral-movementpassword-crackingpenetration-testing
562 years ago
M474 preview

M474

GitHubspyboy-productions/m474

Network Privacy and Security Tool- Change MAC addresses, randomizing internal IP addresses, and renewing IP addresses

educationnetwork-securityprivacy+1
5510 months ago
CloudRecon preview

CloudRecon

GitHubg0ldencybersec/cloudrecon

Suite of tools for red teamers and bug hunters to discover ephemeral cloud assets by scanning IP ranges and inspecting SSL certificates for hidden…

cloud-securityinformation-gatheringnetwork-mapping+2
5332 years ago
GhostTask preview

GhostTask

GitHubnetero1010/ghosttask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

lateral-movementpersistence-mechanismsprivilege-escalation+1
6401 year ago
NetProbe preview

NetProbe

GitHubhalildeniz/netprobe

ARP-based network scanner that discovers devices on a subnet, displaying IP addresses, MAC addresses, manufacturers, and device models with optional…

information-gatheringnetwork-mappingnetwork-security+1
1781 year ago
Burp-Encode-IP preview

Burp-Encode-IP

GitHube1abrador/burp-encode-ip

Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.

dns-fuzzingpenetration-testingred-teaming+2
482 years ago
Androspy preview

Androspy

GitHubcyb0r9/androspy

Automated Android backdoor generator with crypter, IP poisoning, and Metasploit payload integration for penetration testing and red team operations.

android-securityexploit-frameworkspayload-development+3
2687 years ago
quick-lookup-ptrun preview

quick-lookup-ptrun

GitHubgtgalaxi/quick-lookup-ptrun

PowerToys Run plugin for instant IP, domain, and hash lookups across multiple threat intelligence platforms like Shodan, VirusTotal, and GreyNoise.

information-gatheringosintutilities-frameworks
1771 year ago
Previous1…333435…37Next