Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

7600 results

darkdump

josh0xa/darkdump

Open Source Intelligence Interface for Deep Web Scraping

data-exfiltrationemail-harvestinginformation-gathering+4

1.8k6 months ago

pqaudit

pqcworld/pqaudit

Scan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.

code-analysiscryptographydevsecops+5

36 months ago

amass

owasp-amass/amass

In-depth attack surface mapping and asset discovery

data-exfiltrationdns-analysisdns-fuzzing+10

15.3k6 months ago

Pegasus-Pentest-Arsenal

sobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

api-security-testingctfeducation+9

596 months ago

FFM

justicerage/ffm

Freedom Fighting Mode: open source hacking harness

command-and-controldata-exfiltrationinformation-gathering+6

3506 months ago

CloudPentestCheatsheets

dafthack/cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloud-securitycurated-resourcesinformation-gathering+2

2.9k6 months ago

Dop2Mop

h4wkst3r/dop2mop

OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure, collecting CI/CD pipeline, service principal, and ML…

cloud-infrastructure-securitycloud-securitycontainer-security+8

46 months ago

ThreatPad

bhavikmalhotra/threatpad

Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time editing, RBAC,…

data-exfiltrationeducationincident-response+5

246 months ago

CVE-2025-23061-LAB

amikanev/cve-2025-23061-lab

Hands-on lab environment for reproducing and analyzing CVE-2025-23061, providing a controlled setup for security testing and vulnerability research.

exploitationinformation-gatheringpenetration-testing+2

6 months ago

CVE-2018-15473

kaktus5454/cve-2018-15473

SSH username enumeration exploit for CVE-2018-15473 (OpenSSH 2.3-7.7). Sends malformed authentication packets to identify valid users on vulnerable…

exploitationinformation-gatheringpenetration-testing+3

6 months ago

CTF-Web-Exploitation

arnavps/ctf-web-exploitation

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced…

container-securityctfeducation+8

16 months ago

Fourteen_Endpoints

jgoyd/fourteen_endpoints

Shell Companies Inside Apple's Privacy Relay

digital-forensicsdns-analysisforensics+8

56 months ago

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

fevar54/cve-2026-3502-scanner---trueconf-vulnerability-detection-tool

Scanner de CVE-2026-3502: detecta clientes TrueConf vulnerables e IOCs de TrueChaos. Reportes JSON/HTML/CSV.

defensive-toolsincident-responseinformation-gathering+3

6 months ago

cve-2024-3094-analysis

elinanotelina/cve-2024-3094-analysis

Analysis and exploitation toolkit for CVE-2024-3094, providing vulnerability assessment and proof-of-concept execution for the targeted security flaw.

exploitationinformation-gatheringvulnerability-analysis

6 months ago

CVE-2026-33752

redyank/cve-2026-33752

Demonstrates a redirect-based SSRF vulnerability in curl_cffi allowing internal network access, with PoC code and analysis of TLS impersonation…

exploitationinformation-gatheringpenetration-testing+2

6 months ago

OSINT-Framework

lockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

curated-resourcesdns-subdomain-enumerationeducation+8

12.3k6 months ago

wifi-passview

warengonzaga/wifi-passview

An open source batch script based WiFi Passview for Windows!

information-gatheringpassword-crackingwi-fi-auditing+1

3386 months ago

leaky-paths

ayoubfathi/leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…

curated-resourcesfuzzinginformation-gathering+3

1.2k6 months ago

Previous 1…99100Next