Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
43 results
EntraTrace preview

EntraTrace

GitHubbert-janp/entratrace

Defensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…

authenticationcloud-securitydefensive-tools+5
122
9h 27m ago
EDRs preview

EDRs

GitHubmr-un1k0d3r/edrs

Red team tool for EDR evasion: dynamically resolves syscall IDs, patches ntdll stubs, unhooks IAT hooks, and lists hooked APIs from major EDR vendors.

binary-analysiscurated-resourcesids-ips-evasion+3
2.2k6 months ago
SharpExchange preview

SharpExchange

GitHubceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

data-exfiltrationeducationinformation-gathering+4
1033 years ago
certificate-ripper preview

certificate-ripper

GitHubhakky54/certificate-ripper

🔐 A CLI tool to extract server certificates

cryptographygeneral-purpose-utilitiesinformation-gathering+1
9452 days ago
mjet preview

mjet

GitHubmogwaisec/mjet

Mogwai Java Management Extensions (JMX) Exploitation Toolkit

exploitationexploit-frameworksmisconfiguration+3
17310 years ago
VertXploit preview

VertXploit

GitHubcoldfusion39/vertxploit

Exploiting HID VertX and EDGE access control systems

exploitationhardware-iot-securityinformation-gathering+3
259 years ago
BLEBoy preview

BLEBoy

GitHubnccgroup/bleboy

BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing…

bluetooth-securityeducationembedded-systems-security+3
498 years ago
ESP-RFID-Tool preview

ESP-RFID-Tool

GitHubrfidtool/esp-rfid-tool

A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing…

embedded-systems-securityfuzzinghardware-hacking+5
5894 years ago
GoAWSConsoleSpray preview

GoAWSConsoleSpray

GitHubwhiteoaksecurity/goawsconsolespray

Tool to spray AWS Console IAM Logins

authenticationcloud-securityinformation-gathering+3
344 years ago
tinyxml preview

tinyxml

GitHubvm2mv/tinyxml

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

code-analysisgeneral-purpose-utilitiesstatic-analysis+1
21 year ago
CVE-2021-42362 preview

CVE-2021-42362

GitHubsamiba6/cve-2021-42362

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the…

exploitationpayload-developmentremote-access-tool+2
1 year ago
ClearML-CVE-2024-24590-RCE preview

ClearML-CVE-2024-24590-RCE

GitHubsviim/clearml-cve-2024-24590-rce

With this script you can exploit the CVE-2024-24590

exploitationpayload-developmentremote-access-tool+2
42 years ago
bigdecimal-segfault-fix preview

bigdecimal-segfault-fix

GitHubnzkoz/bigdecimal-segfault-fix

Provides a quick workaround for the segfault bug in Ruby (CVE-2009-1904)

code-analysisgeneral-purpose-utilitiesmisconfiguration+1
1417 years ago
python-patrol preview

python-patrol

GitHubcodeskipper/python-patrol

Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed

general-purpose-utilitiesscripting-automationvulnerability-analysis+1
2 years ago
NextPass preview

NextPass

GitHub0xblarky/nextpass

A tool which can be used to generate password list or dictionary from the details of the target

ai-securityinformation-gatheringpassword-attacks+3
58 months ago
gogs preview

gogs

GitHubbackline-playground/gogs

Fork of gogs/gogs for reachability benchmark testing (CVE-2024-45337)

exploitationgeneral-purpose-utilitiespenetration-testing+1
6 months ago
socks5 preview

socks5

GitHubwzshiming/socks5

Socks5/Socks5h server and client. Full TCP/Bind/UDP and IPv4/IPv6 support

general-purpose-utilitiesnetwork-securitypenetration-testing+2
1311 month ago
sandbox-runtime preview

sandbox-runtime

GitHubanthropic-experimental/sandbox-runtime

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

configuration-auditingcontainer-securitydefensive-tools+4
6.8k2 days ago
Previous123Next