Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
643 results
BurpSuiteSharpener preview

BurpSuiteSharpener

GitHubmdsecresearch/burpsuitesharpener
penetration-testingutilities-frameworksweb-security
5233 years ago
Shiva preview

Shiva

GitHubs0md3v/shiva

Improved DOS exploit for wordpress websites (CVE-2018-6389)

exploitationpenetration-testingred-teaming+2
1305 years ago
CVE-2025-61882-Oracle-EBS preview

CVE-2025-61882-Oracle-EBS

GitHubzerozenxlabs/cve-2025-61882-oracle-ebs
exploitationincident-responsepenetration-testing+2
1910 months ago
cve-2025-61882-oracle_ebs_rce_reproduction preview

cve-2025-61882-oracle_ebs_rce_reproduction

GitHubrazureink/cve-2025-61882-oracle_ebs_rce_reproduction

CVE Reproduction: cve-2025-61882-oracle_ebs_rce_reproduction

exploitationpayload-developmentpenetration-testing+3
29 days ago
SAMLRaider preview

SAMLRaider

GitHublindi2/samlraider

SAML2 Burp Extension

authenticationcryptographyidentity-access-management+4
37 years ago
CVE-2020-23968-ILEX-SignGo-EoP preview

CVE-2020-23968-ILEX-SignGo-EoP

GitHubricardojba/cve-2020-23968-ilex-signgo-eop

CVE-2020-23968

exploitationpenetration-testingprivilege-escalation+1
12 years ago
cve-2023-22515 preview

cve-2023-22515

GitHubxorbbo/cve-2023-22515

NSE script to check if app is vulnerable to cve-2023-22515

exploitationpenetration-testingreconnaissance+2
2 years ago
paracosme preview
Archived

paracosme

GitHub0vercl0k/paracosme

Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stage during the…

binary-exploitationexploitationpayload-development+3
902 years ago
symboliclink-testing-tools preview
Archived

symboliclink-testing-tools

GitHubgoogleprojectzero/symboliclink-testing-tools
exploitationpenetration-testingpost-exploitation+3
8613 years ago
hetty preview

hetty

GitHubdstotijn/hetty

An HTTP toolkit for security research.

penetration-testingweb-proxies-interceptionweb-security
12.0k1 month ago
p0wny-shell preview

p0wny-shell

GitHubflozz/p0wny-shell

Single-file PHP shell

penetration-testingremote-access-toolweb-application-exploitation
2.9k1 year ago
cheetah preview

cheetah

GitHubshmilylty/cheetah

a very fast brute force webshell password tool

password-attackspenetration-testingweb-application-exploitation
6563 years ago
http2smugl preview

http2smugl

GitHubneex/http2smugl

Detects and exploits HTTP request smuggling vulnerabilities via HTTP/2 to HTTP/1.1 conversion, using automated header smuggling techniques to…

penetration-testingvulnerability-analysisweb-application-exploitation+1
5621 year ago
dotdotslash preview

dotdotslash

GitHubjcesarstef/dotdotslash

Search for Directory Traversal Vulnerabilities

penetration-testingvulnerability-analysisweb-application-exploitation+1
4627 months ago
PwnFox preview

PwnFox

GitHubyeswehack/pwnfox

Firefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…

penetration-testingweb-proxies-interceptionweb-security
1.3k3 years ago
ProxyNotShell-PoC preview

ProxyNotShell-PoC

GitHubtestanull/proxynotshell-poc
exploitationpenetration-testingweb-application-exploitation
4123 years ago
autochrome preview

autochrome

GitHubnccgroup/autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

penetration-testingweb-proxies-interceptionweb-security
4802 years ago
wssip preview

wssip

GitHubnccgroup/wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

fuzzingpenetration-testingweb-proxies-interception+1
4503 years ago
Previous1234…36Next