Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
34 results
openshield preview

openshield

GitHubowasp/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with…

cloud-securityconfiguration-auditingcryptography+4
56
2 days ago
POC_CVE-2026-41940 preview

POC_CVE-2026-41940

GitHubimbas007/poc_cve-2026-41940

Proof-of-concept exploit for CVE-2026-41940 targeting cPanel, enabling account enumeration, command execution, and interactive shell access on…

command-and-controlexploitationpenetration-testing+3
4 months ago
vegadns preview

vegadns

GitLabwattocyber/vegadns

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

dns-analysisdns-subdomain-enumerationinformation-gathering+3
26 days ago
Enumprotections_BOF preview

Enumprotections_BOF

GitHuboctoberfest7/enumprotections_bof

A BOF to enumerate system process, their protection levels, and more.

information-gatheringpenetration-testingpost-exploitation+4
1261 year ago
reverse-ip-new-api preview

reverse-ip-new-api

GitHubjenderal92/reverse-ip-new-api

This tool is used to perform reverse IP lookups— searching for all domains hosted on one IP address.

information-gatheringnetwork-mappingosint+1
33 months ago
erl_mouse preview

erl_mouse

GitHubm0usem0use/erl_mouse

python script to find vulnerable targets of CVE-2025-32433

exploitationinformation-gatheringnetwork-mapping+3
51 year ago
CVE-2024-9166 preview

CVE-2024-9166

GitHubandrysqui/cve-2024-9166

A vulnerability scanner that searches for the CVE-2024-9166 vulnerability on websites, more info about this vulnerability here:…

exploitationinformation-gatheringpenetration-testing+3
41 year ago
nelson preview

nelson

GitHubswelljoe/nelson

Finding vulnerabilities through dumb brute force

ai-securitycode-analysiseducation+3
551 month ago
zizzania preview

zizzania

GitHubcyrus-and/zizzania

Automated DeAuth attack

information-gatheringpenetration-testingwi-fi-auditing+1
3202 years ago
SMBCrunch preview

SMBCrunch

GitHubraikia/smbcrunch

3 tools that work together to simplify reconaissance of Windows File Shares

information-gatheringnetwork-securitypenetration-testing+2
1708 years ago
RED_HAWK preview

RED_HAWK

GitHubtuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

crawlerdns-analysisinformation-gathering+5
3.8k6 years ago
HoneypotBuster preview

HoneypotBuster

GitHubjavelinnetworks/honeypotbuster

PowerShell module for red teams to detect honeypots, honeytokens, and deception techniques in Active Directory environments, including fake accounts,…

penetration-testingred-teaming
2798 years ago
Invoke-WCMDump preview

Invoke-WCMDump

GitHubpeewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

information-gatheringpassword-crackingpenetration-testing+2
7328 years ago
EagleEye preview

EagleEye

GitHubthoughtfuldev/eagleeye

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

information-gatheringmachine-learningosint+3
5.2k4 years ago
SMWYG-Show-Me-What-You-Got preview

SMWYG-Show-Me-What-You-Got

GitHubviralmaniar/smwyg-show-me-what-you-got

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text…

information-gatheringosintpassword-cracking+1
5737 years ago
sh00t preview

sh00t

GitHubpavanw3b/sh00t

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to…

educationpenetration-testingutilities-frameworks+2
2762 years ago
Rock-ON preview

Rock-ON

GitHubsilverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

crawlerdns-subdomain-enumerationinformation-gathering+5
2906 years ago
dnsmap preview

dnsmap

GitHubmakefu/dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

dns-subdomain-enumerationinformation-gatheringpenetration-testing+1
1189 years ago
Previous12Next