Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

920 results

CVE-2012-1823-exploit-for-https-user-password-web

dmitri131313/cve-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 exploit for https user password website.

exploitationinformation-gatheringpenetration-testing+2

1 year ago

OverlayFS---CVE-2021-3493

sornphut/overlayfs---cve-2021-3493

Technical analysis of CVE-2021-3493, an Ubuntu OverlayFS local privilege escalation vulnerability, including root cause explanation and affected…

binary-exploitationeducationexploitation+2

1 year ago

KingOfBugBountyTips

kingofbugbounty/kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…

curated-resourceseducationosint+5

5.5k2 months ago

PhishingKitHunter

t4d/phishingkithunter

Find phishing kits which use your brand/organization's files and image.

information-gatheringlog-analysisosint+3

2437 years ago

Threat-Intelligence-Alerts

nccgroup/threat-intelligence-alerts

Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding intelligence…

curated-resourcesincident-responsethreat-intelligence

253 years ago

openhaystack

seemoo-lab/openhaystack

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

bluetooth-securitycryptographyeducation+5

13.7k1 month ago

nOBEX

nccgroup/nobex

nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles

bluetooth-securityembedded-systems-securityfuzzing+2

985 years ago

Archived

EmailFinder

josue87/emailfinder

Search emails from a domain through search engines

crawleremail-harvestinginformation-gathering+2

4253 years ago

infoooze

devxprite/infoooze

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

dns-analysisemail-harvestinginformation-gathering+5

1.1k2 years ago

CloudHunter

1n3/cloudhunter

Find unreferenced AWS S3 buckets which have CloudFront CNAME records pointing to them

cloud-securitydns-analysisinformation-gathering+2

358 years ago

PHP-Fuzzer

nikic/php-fuzzer

Edge-coverage-guided fuzzer for PHP libraries that detects bugs via crashes, timeouts, and warnings. Supports corpus management, crash minimization,…

code-analysisdynamic-analysis-sandboxingfuzzing+1

4448 months ago

My-Presentation-Slides

dhiyaneshgeek/my-presentation-slides

Collection's of Tech Talk that are presented by me :)

api-securitycloud-securitycurated-resources+6

1011 month ago

CVE-2024-10914

egi08/cve-2024-10914

CVE-2024-10914_Manual testing with burpsuite

command-and-controlexploitationpenetration-testing+3

1 year ago

zynos-attacker

nasroabd/zynos-attacker

ZynOS tool for automated attack on a range of IPs, find more informations at :

dns-analysiseducationexploitation

7412 years ago

CRT

crowdstrike/crt

Audits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1

7583 years ago

goca

gocaio/goca

Goca Scanner

information-gatheringosintpenetration-testing+1

3306 years ago

JoomlaScan

drego85/joomlascan

A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.

information-gatheringreconnaissancevulnerability-scanners+1

2644 years ago

roamr

sourabh-khot65/roamr

Find the best WiFi network for where you are — scores every saved network for real-world quality, not just signal bars.

general-purpose-utilitiesnetwork-securitywireless-security

81 month ago

Previous 1 234…52 Next