Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
68 results
awesome-blackhat-arsenal preview

awesome-blackhat-arsenal

GitHubelbraino/awesome-blackhat-arsenal

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

curated-resourcesdefensive-toolsinformation-gathering+8
192
1 month ago
php2shell-lab preview

php2shell-lab

GitHubtani2shell/php2shell-lab

Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…

binary-exploitationcontainer-securityctf+7
720h 23m ago
php2shell-lab preview

php2shell-lab

GitHubtaniungou/php2shell-lab

Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…

binary-exploitationcontainer-securityctf+7
610 days ago
Black_Hole_Attack_for_Vector_Database preview

Black_Hole_Attack_for_Vector_Database

GitHubhanxi19/black_hole_attack_for_vector_database

Research implementation of the Black-Hole Attack that poisons vector database indexes via centrality-driven hubness, with FAISS pipelines and…

adversarial-attackai-securitydata-exfiltration+4
44 months ago
ddossnake preview

ddossnake

GitLabvqkro/ddossnake

Go load and stress testing tool with L7 HTTP and L4 raw TCP/UDP modes, multi-threaded workers, live rate graph, and a Windows GUI plus cross-platform…

command-and-controlnetwork-securitypenetration-testing+2
112 days ago
blackbox-pentesting-infsecos preview

blackbox-pentesting-infsecos

GitHubsaqibnet/blackbox-pentesting-infsecos

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

ctfeducationexploitation+9
6 months ago
Jackalope preview

Jackalope

GitHubgoogleprojectzero/jackalope

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

binary-analysisdebuggersdynamic-analysis-sandboxing+6
1.4k2 months ago
APIHarvester preview

APIHarvester

GitHubpiratesshield/apiharvester

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

api-securityapi-security-testingcrawler+9
353 months ago
XXERipper preview

XXERipper

GitHubkamalx06/xxeripper

Black-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…

api-security-testingdata-exfiltrationexploitation+9
131 month ago
ODPure preview

ODPure

GitHubalex66366/odpure

Black-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…

adversarial-attackai-securitydefensive-tools+4
21 month ago
Blackhat-USA-2022-Materials preview

Blackhat-USA-2022-Materials

GitHubh4wkst3r/blackhat-usa-2022-materials

Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks

curated-resourceseducationexploitation+3
644 years ago
Starlink-FI preview

Starlink-FI

GitHubkuleuven-cosic/starlink-fi

Voltage fault-injection modchip for black-box security evaluation of Starlink terminals, bypassing bootloader signature verification to execute…

binary-analysisembedded-systems-securityexploitation+4
1.0k4 years ago
cisco_asa_research preview

cisco_asa_research

GitHubjbaines-r7/cisco_asa_research

Cisco ASA Software and ASDM Security Research

exploitationexploit-frameworksinformation-gathering+7
874 years ago
hwbp4mw preview

hwbp4mw

GitHubrad9800/hwbp4mw

Hardware breakpoint hooking engine for Windows that uses debug registers to hook functions, bypass ETW/AMSI, and evade user-land EDR monitoring.

adversarial-attackdebuggersids-ips-evasion+2
2733 years ago
BLACKHAT_Asia2023 preview

BLACKHAT_Asia2023

GitHubmr-xn/blackhat_asia2023

Black Hat Asia 2023 PDF Public

curated-resourceseducationpapers-research
5813 years ago
Conferences preview

Conferences

GitHubonhexgroup/conferences

Conference presentation slides

curated-resourceseducationpapers-research
2.4k2 months ago
PoC-public preview

PoC-public

GitHubffri/poc-public

Curated collection of proof-of-concept vulnerability exploits and research presented at security conferences such as Black Hat and CODE BLUE.

curated-resourcesexploitationvulnerability-analysis
311 year ago
am335xbootrom preview

am335xbootrom

GitHubsjgallagher2/am335xbootrom

Reverse engineering the TI AM3358 boot ROM

binary-analysisdebuggerseducation+4
612 years ago
Previous1234Next