Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
7599 results
ad_attack_architecture preview

ad_attack_architecture

GitHubkypvas/ad_attack_architecture

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

curated-resourceseducationidentity-management+7
36
1 month ago
red-team-map preview

red-team-map

GitHubkypvas/red-team-map

Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact

command-and-controlcurated-resourceseducation+7
3024 days ago
phantom-grid preview

phantom-grid

GitHubevkir/phantom-grid

Free Burp Collaborator alternative- OOB interaction capture (HTTP/HTTPS/DNS) with SQLite & exfil reassembly

data-exfiltrationdns-analysisinformation-gathering+7
11 month ago
tanuki preview

tanuki

GitHubmafifrizi/tanuki

Tactical Identity Operator for Linux & Hybrid Active Directory

ai-securityauthenticationdefensive-tools+6
152 days ago
EBurst preview

EBurst

GitHubgrayddq/eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。

authenticationemail-securityinformation-gathering+4
3433 years ago
geo-sleuth preview

geo-sleuth

GitHuboldcircle/geo-sleuth

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…

ai-securityinformation-gatheringosint+4
1.5k1 day ago
kev-data preview

kev-data

GitHubcisagov/kev-data

Mirrors CISA's Known Exploited Vulnerabilities (KEV) catalog as CSV and JSON with a JSON schema, enabling programmatic access and commit-history…

curated-resourcesdefensive-toolsinformation-gathering+5
1241 day ago
cyclepatrol preview

cyclepatrol

GitHubbuybitart/cyclepatrol

Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports.

defensive-toolshash-analysisinformation-gathering+8
42 days ago
dddd preview

dddd

GitHubsleepingbag945/dddd

Batch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…

fingerprint-spoofinginformation-gatheringnetwork-mapping+9
1.9k2 years ago
Get-NetNTLM preview

Get-NetNTLM

GitHubelnerd/get-netntlm

Powershell module to get the NetNTLMv2 hash of the current user

hash-analysisinformation-gatheringpassword-attacks+4
974 years ago
cli preview

cli

GitHubvulncheck-oss/cli

VulnCheck's official command line tool

api-securitydns-analysisinformation-gathering+8
16018 days ago
vulnrichment preview

vulnrichment

GitHubcisagov/vulnrichment

A repo to conduct vulnerability enrichment.

curated-resourcesdefensive-toolsinformation-gathering+5
8662 days ago
cartography preview

cartography

GitHubcartography-cncf/cartography

Pulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+8
4.1k2 days ago
blackbox-pentesting-infsecos preview

blackbox-pentesting-infsecos

GitHubsaqibnet/blackbox-pentesting-infsecos

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

ctfeducationexploitation+9
5 months ago
connectors preview

connectors

GitHubopencti-platform/connectors

Collection of OpenCTI connectors that ingest and synchronize threat intelligence, IOCs, and CTI data from external sources like MISP and MITRE ATT&CK…

defensive-toolsincident-responseinformation-gathering+5
5852 days ago
Cyber-Library preview

Cyber-Library

GitHubcyber-courses/cyber-library

Community-maintained Markdown knowledge base covering cybersecurity foundations, offensive and defensive practice, governance, threat intelligence,…

curated-resourcesdefensive-toolseducation+7
852 days ago
go-exploit-cache preview

go-exploit-cache

GitHubvulncheck-oss/go-exploit-cache

A utility for producing an HTTP cache database to use with go-exploit

exploitationinformation-gatheringosint+6
98 months ago
cisco-ios-xe-implant-scanner preview

cisco-ios-xe-implant-scanner

GitHubvulncheck-oss/cisco-ios-xe-implant-scanner

Go-based scanner that detects implanted Cisco IOS XE systems by sending crafted HTTP requests to identify compromised devices and vulnerable versions.

defensive-toolsembedded-systems-securityexploitation+6
421 year ago
Previous12…100Next