Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
317 results
EventHorizon preview

EventHorizon

GitHubhullabrian/eventhorizon

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

defensive-toolseducationforensics+5
55
6 months ago
ripVT preview

ripVT

GitHubmatonis/ripvt

Virus Total API Maltego Transform Set For Canari

information-gatheringmalware-analysisosint+2
167 years ago
CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline preview

CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline

GitHubmaxwitat/cve-2023-36884-scripts-for-intune-remediation-sccm-compliance-baseline

The remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection…

configuration-auditingdefensive-toolsincident-response+2
263 years ago
nrf24-injection preview

nrf24-injection

GitHubxswxm/nrf24-injection

A tool set for sniffing devices and launching attacks with Crazyradio

exploitationhardware-hackingpenetration-testing+1
188 years ago
AppArmor.d preview

AppArmor.d

GitLabroddhjav/apparmor.d

Comprehensive set of over 1500 AppArmor profiles to confine Linux system processes, desktops, and services, with support for multiple distributions…

configuration-auditingcurated-resourceseducation+1
72 days ago
cloudformation-waf-acl preview

cloudformation-waf-acl

GitLabfer1035_aws/cloudformation/cloudformation-waf-acl

An AWS CloudFormation template used to provision and manage AWS WAFv2 resources, including a Web ACL, managed rule groups, a custom regex pattern…

cloud-securityconfiguration-auditingmisconfiguration+2
1 month ago
CVE-2022-41040 preview

CVE-2022-41040

GitHubd3duct1v/cve-2022-41040

Code set relating to CVE-2022-41040

exploitationpenetration-testingreconnaissance+2
53 years ago
An-Integrated-Wireless-Network-Forensic-Analysis-Framework preview

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

GitHubbenadia/an-integrated-wireless-network-forensic-analysis-framework

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

digital-forensicsforensicsnetwork-forensics+2
68 years ago
CVE-2023-23397 preview

CVE-2023-23397

GitHubgrn-bogo/cve-2023-23397

Python script to create a message with the vulenrability properties set

email-securityexploitationpayload-generation+2
43 years ago
f5-waf-quick-patch-cve-2021-44228 preview

f5-waf-quick-patch-cve-2021-44228

GitHubirgoncalves/f5-waf-quick-patch-cve-2021-44228

This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode

api-securitycloud-securitydevsecops+3
34 years ago
KPOT-string-decrypter preview

KPOT-string-decrypter

GitHubdodo-sec/kpot-string-decrypter

IDA python scripts to decrypt strings from KPOT and set those as comments

binary-analysisencryption-decryption-toolsmalware-analysis+2
63 years ago
CVE-2026-51947-Advisory preview

CVE-2026-51947-Advisory

GitHubtimtimxs/cve-2026-51947-advisory

Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left…

code-analysisexploitationpenetration-testing+2
1 month ago
CVE-2025-57833 preview

CVE-2025-57833

GitHubmkway/cve-2025-57833

We've set up an environment to test CVE-2025-57833. This environment was built using AI, so it's subject to ongoing modification.

code-analysiseducationpenetration-testing+3
211 months ago
CVE-2025-2563 preview

CVE-2025-2563

GitHubnxploited/cve-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is…

educationexploitationpayload-development+5
4 months ago
wvctf preview

wvctf

GitHubsyn-4ck/wvctf

WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…

ctfeducationlabs-practice+3
12 years ago
Explosive-As-Hell-MCS-Qualifer-Web-500 preview

Explosive-As-Hell-MCS-Qualifer-Web-500

GitHubabdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

binary-exploitationctfeducation+7
4 months ago
SocialEngineering-Templates preview

SocialEngineering-Templates

GitHubcappricio-securities/socialengineering-templates

a SET framework templates

information-gatheringpenetration-testing-frameworksphishing-tools+2
5 months ago
CVE-2021-3129---Laravel-RCE preview

CVE-2021-3129---Laravel-RCE

GitHublukwagoasuman/cve-2021-3129---laravel-rce

## About The script has been made for exploiting the Laravel RCE (CVE-2021-3129) vulnerability.<br> This script allows you to write/execute commands…

exploitationvulnerability-analysisweb-application-exploitation
11 year ago
Previous1…345…18Next