Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13633 results
gryph preview

gryph

GitHubsafedep/gryph

Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.

defensive-toolsscripting-automationconfiguration-auditing+6
179
3 days ago
kernelmode-driver preview

kernelmode-driver

GitHubgmh5225/kernelmode-driver

Kernel Driver for x64 Window System which allows you to read/write Virtual/Physical Memory hooking Win32k

memory-forensicsreverse-engineeringdebuggers+4
43 years ago
KeyPatchX preview

KeyPatchX

GitHubgmh5225/keypatchx

KeyPatch Enhanced — IDA Pro plugin for symbol-aware x86/x64 assembly patching, powered by Keystone Engine. Fork of Keypatch with automatic IDA symbol…

static-analysisexploitationreverse-engineering+4
97 months ago
kli-ex preview

kli-ex

GitHubgmh5225/kli-ex

Extended kernel lazy importer for Windows drivers that resolves APIs at runtime with encrypted, cached import names to hide kernel function usage…

defensive-toolspersistence-mechanismsreverse-engineering+4
343 years ago
KProcTerminator preview

KProcTerminator

GitHubgmh5225/kprocterminator

Windows kernel driver designed for terminating specific processes on a system

defensive-toolsprivilege-escalationpersistence-mechanisms+3
2 years ago
caeruleus preview

caeruleus

GitHubpraetorian-inc/caeruleus

Single Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…

bluetooth-securityiot-securityvulnerability-analysis+8
5720 days ago
frida-gum preview

frida-gum

GitHubfrida/frida-gum

Cross-platform instrumentation and introspection library written in C

dynamic-analysis-sandboxingmemory-forensicscode-analysis+6
1.0k3h 28m ago
ultrasploiter preview

ultrasploiter

GitLabvqkro/ultrasploiter

A single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…

penetration-testing-frameworksreconnaissancevulnerability-scanners+9
9 days ago
benign-instruction-bench preview

benign-instruction-bench

GitHublzwhehe/benign-instruction-bench

Re-evaluating prompt-injection detectors on LLM agent tool outputs (paper draft, scripts, scores)

defensive-toolsvulnerability-analysismachine-learning+3
9 days ago
sliver-gui preview

sliver-gui

GitHubsliverarmory/sliver-gui

Cross-platform Electron GUI for the Sliver C2 framework, providing session and beacon dashboards, payload generation, listeners, loot, and cloud…

penetration-testing-frameworkspayload-generationlateral-movement+7
1725 days ago
rea preview

rea

GitHubmorluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

static-analysisdynamic-analysis-sandboxingcode-analysis+5
340.2k8h 6m ago
fsop-finder preview

fsop-finder

GitHubxf1les/fsop-finder

Binary Ninja plugin that scans glibc libio for FSOP code paths capable of hijacking control flow and stack pointer, aiding heap exploitation research.

static-analysismemory-forensicsvulnerability-analysis+5
124 years ago
burp-ResponseClusterer preview

burp-ResponseClusterer

GitHubmodzero/burp-responseclusterer

Burp plugin that clusters responses to show an overview of received responses

defensive-toolsweb-vulnerability-scannersvulnerability-analysis+5
147 years ago
ColonelClustered preview

ColonelClustered

GitHubhoodoer/colonelclustered

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…

vulnerability-analysisweb-proxies-interceptionweb-application-exploitation+5
121 month ago
PentagridResponseOverview preview

PentagridResponseOverview

GitHubpentagridsec/pentagridresponseoverview

Response Overview Extension for BurpSuite - Find exotic responses by grouping response bodies

defensive-toolsweb-vulnerability-scannersvulnerability-analysis+6
119 months ago
capability-sdk preview

capability-sdk

GitHubpraetorian-inc/capability-sdk

Shared Go SDK defining a standard capability interface for security scanners, with multi-format finding output (terminal, JSON, NDJSON, Markdown,…

defensive-toolsstatic-analysisvulnerability-scanners+4
113 days ago
active-scan-plus-plus preview

active-scan-plus-plus

GitHubportswigger/active-scan-plus-plus

Burp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, code injection, and known CVEs like…

defensive-toolsvulnerability-scannersweb-vulnerability-scanners+6
2572 months ago
XSW preview

XSW

GitHubd0ge/xsw

XML Signature Wrapping Burp Suite Extensions

vulnerability-scannersexploitationweb-application-exploitation+6
2310 months ago
Previous1…121314…100Next