Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2485 results
UserLAnd preview

UserLAnd

GitHubcypherpunkarmory/userland

Main UserLAnd Repository

general-purpose-utilitiessecurity-virtualization
4.3k9 days ago
Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu preview

Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu

GitHubalkimcoskun/yordam-kutuphane-otomasyonunda-coklu-html-enjeksiyonu

CVE-2026-77818 - Yordam Kütüphane Otomasyon Sistemi - Üç ayrı noktada yansıtılmış HTML enjeksiyonu, form action ele geçirme ve kimlik bilgisi…

exploitationphishingvulnerability-analysis+2
9 days ago
coraza preview

coraza

GitHubcorazawaf/coraza

Go-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…

api-securityapi-security-testingdefensive-tools+7
3.8k10 days ago
CVE-2024-36058 preview

CVE-2024-36058

GitHubhacklantic/cve-2024-36058

Proof-of-concept exploit and advisory for CVE-2024-36058, a time-based blind SQL injection in Koha Library Software's opac-sendbasket.pl, enabling…

exploitationpenetration-testingvulnerability-analysis+1
10 days ago
CVE-2024-36057 preview

CVE-2024-36057

GitHubhacklantic/cve-2024-36057

Advisory and proof-of-concept for CVE-2024-36057, an authenticated OS command injection in Koha Library Software, demonstrating arbitrary command…

exploitationpenetration-testingvulnerability-analysis+1
10 days ago
awesome-web-hacking preview

awesome-web-hacking

GitHubinfoslack/awesome-web-hacking

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

cryptographyctfcurated-resources+6
7.3k10 days ago
ASVS preview

ASVS

GitHubowasp/asvs

Application Security Verification Standard

api-securitycode-analysiscurated-resources+3
3.6k10 days ago
owtf preview

owtf

GitHubowtf/owtf

Modular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…

exploit-frameworkspenetration-testingpenetration-testing-frameworks+2
2.0k11 days ago
tailsnitch preview

tailsnitch

GitHubadversis/tailsnitch

A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…

cloud-securityconfiguration-auditingdevsecops+4
1.1k11 days ago
CVE-2026-78071 preview

CVE-2026-78071

GitHubtoanln-cov/cve-2026-78071

Stored XSS via Location Title in DPCalendar Free

code-analysisexploitationvulnerability-analysis+2
11 days ago
SecurityShepherd preview

SecurityShepherd

GitHubowasp/securityshepherd

Web and mobile application security training platform

ctfeducationlabs-practice+3
1.5k11 days ago
CVE-2026-9055 preview

CVE-2026-9055

GitHubexecution-py/cve-2026-9055

Defensive analysis of CVE-2026-9055, an unauthenticated privilege escalation in Amelia WordPress booking plugin. Provides root cause breakdown,…

configuration-auditingcurated-resourceseducation+3
11 days ago
WindowsProtocolTestSuites preview

WindowsProtocolTestSuites

GitHubmicrosoft/windowsprotocoltestsuites

⭐⭐ Join us at SNIA SDC for the SMB3 IO Lab (September 28 - October 1, 2026), see upcoming Interoperability Events

authenticationcloud-securityconfiguration-auditing+6
56611 days ago
PoC-CVE-2026-9198 preview

PoC-CVE-2026-9198

GitHubrmhowe425/poc-cve-2026-9198

Exploits CVE-2026-9198 in Langflow to execute arbitrary bash commands on target instances via a crafted URL parameter.

exploitationpenetration-testingvulnerability-analysis+1
111 days ago
Bug-Bounty-Arsenal-v.3 preview

Bug-Bounty-Arsenal-v.3

GitHubfoxvr-sudo/bug-bounty-arsenal-v.3

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

api-security-testingcrawlerdevsecops+8
1212 days ago
flatpak preview

flatpak

GitHubflatpak/flatpak

Linux application sandboxing and distribution framework

container-securitysecurity-virtualization
5.1k12 days ago
CVE-2026-73570 preview

CVE-2026-73570

GitHubbiutrap/cve-2026-73570

Proof-of-concept exploit for CVE-2026-73570, demonstrating SMTP command injection via crafted RCPT TO header to trigger service status changes.

email-securityexploitationvulnerability-analysis+1
12 days ago
xyntia preview

xyntia

GitHubbinsec/xyntia

Xyntia, the black-box deobfuscator

binary-analysiscode-analysisdynamic-code-analysis+1
9712 days ago
Previous1…567…100Next