Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
66 results
DROS-VEP-lite preview

DROS-VEP-lite

GitHubtop-celestial-company-ltd/dros-vep-lite

Open-source, 100% reproducible AI Agent Runtime Security Benchmark & Sandbox Environment (RFC-010 Draft Protocol).

ai-securitydefensive-toolsdynamic-analysis-sandboxing+8
1210 days ago
Argus preview

Argus

GitHubdivinelabio/argus

The Ultimate Information Gathering Toolkit

crawlerdns-subdomain-enumerationemail-harvesting+8
4.2k9 months ago
CVE-2021-24307-all-in-one-seo-pack-admin-rce preview

CVE-2021-24307-all-in-one-seo-pack-admin-rce

GitHubdarkpills/cve-2021-24307-all-in-one-seo-pack-admin-rce

Proof-of-concept exploit for CVE-2021-24307, an authenticated admin RCE in All in One SEO Pack <= 4.1.0.1 via PHP unserialization, enabling arbitrary…

exploitationpayload-generationpenetration-testing+3
44 years ago
CVE-2026-27966--RCE-in-Langflow preview

CVE-2026-27966--RCE-in-Langflow

GitHubanon-cyber-team/cve-2026-27966--rce-in-langflow

All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell,…

command-and-controlexploitationpenetration-testing+3
27 months ago
StegoLab preview

StegoLab

GitHubvatsal200600/stegolab

All-in-one Image Steganography Toolkit for CTFs & Forensics

ctfdigital-forensicsforensics+2
25 months ago
briefr preview

briefr

GitHubsoldier0x0/briefr

Open Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…

defensive-toolsioc-managementthreat-feeds-aggregators+2
310 days ago
android-pentest-tool preview

android-pentest-tool

GitHubdzmitry-savitski/android-pentest-tool

Android penetration testing tool for Kali linux

android-securitybinary-analysismobile-app-pentesting+3
1898 years ago
cent preview

cent

GitHubxm1k3/cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

curated-resourcespenetration-testingvulnerability-scanners+1
1.1k3 months ago
horus preview

horus

GitHub6abd/horus

An OSINT / digital forensics tool built in Python

digital-forensicsencryption-decryption-toolsforensics+3
9912 months ago
CVE-2024-12594 preview

CVE-2024-12594

GitHubrandomrobbiebf/cve-2024-12594

ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation

exploitationpenetration-testingprivilege-escalation+2
1 year ago
papers preview

papers

GitHubalt3kx/papers

A handy collection of my public papers, all in one place.

curated-resourceseducationexploitation+3
28 years ago
mimikatz-detector-busylight preview

mimikatz-detector-busylight

GitHubnccgroup/mimikatz-detector-busylight

USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a…

defensive-toolsincident-responseintrusion-detection+3
214 years ago
ghostrecon preview

ghostrecon

GitHubcappricio-securities/ghostrecon

gh0str3con is a All in one cloud based web Recon tool.

crawlerdns-analysisinformation-gathering+5
282 months ago
html-poc preview

html-poc

GitHubfoobar7/html-poc

Proof of concept code for client-side vulnerabilities

exploitationpenetration-testingweb-security
177 years ago
sashay preview

sashay

GitHubscalabli/sashay

Sashay is an automatic installer for useful tools.

exploitationforensicsinformation-gathering+6
2153 years ago
CVE-2024-43160 preview

CVE-2024-43160

GitHubktn1990/cve-2024-43160

The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is…

exploitationpayload-generationpenetration-testing+3
22 years ago
CVE-2025-8422 preview

CVE-2025-8422

GitHubrandomrobbiebf/cve-2025-8422

Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

exploitationinformation-gatheringpenetration-testing+2
1 year ago
CVE-2025-57819-exploit preview

CVE-2025-57819-exploit

GitHubjeanback1/cve-2025-57819-exploit

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit

educationexploitationpayload-generation+4
23 months ago
Previous1234Next