Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

89 results

XSSFire

seifelsallamy/xssfire

A standalone Blind XSS Script.

data-exfiltrationexploitationinformation-gathering+3

1 year ago

Samuraizer

zomry1/samuraizer

NotebookLM on steroids — purpose-built for security researchers.

crawlercurated-resourceseducation+5

295 months ago

CVE-2025-11749

nxploited/cve-2025-11749

AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation

exploitationinformation-gatheringpenetration-testing+4

810 months ago

CVE-2025-13407

xxconi/cve-2025-13407

GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload

exploitationpenetration-testingvulnerability-analysis+2

2 months ago

CVE-2017-7679

al-lord0x/cve-2017-7679

CVE-2017-7679 POC SCRIPT BY LORDWARE....

exploitationpayload-generationpenetration-testing+2

111 months ago

CVE-2026-1357

nxploited/cve-2026-1357

Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

exploitationpayload-generationpenetration-testing+3

6 months ago

Archived

BrainDamage

mehulj94/braindamage

Remote administration service which uses twitter as a command and control server

command-and-controldata-exfiltrationinformation-gathering+5

7155 years ago

telegram-history-dump

tvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…

data-exfiltrationinformation-gatheringosint+1

6807 years ago

TeleShadow2

parsingteam/teleshadow2

TeleShadow - Telegram Desktop Session Stealer (Windows)

malware-analysisremote-access-trojan

1168 years ago

PersonalStuff

rootup/personalstuff

Research artifact repository containing fuzzing corpora (liblnk, tcpdump, vim), a Telegram privacy vulnerability report, and supporting scripts for…

curated-resourceseducationfuzzing+1

1745 months ago

TeleShadow3

eternalc0der/teleshadow3

Telegram Desktop Session Stealer

information-gatheringmalware-analysisremote-access-trojan+1

1817 years ago

telegram-story-scraper

robertaitch/telegram-story-scraper

A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script…

data-exfiltrationinformation-gatheringosint+1

311 year ago

tgscope

itsmoorgrove/tgscope

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

crawlerdigital-forensicsinformation-gathering+1

27 days ago

Archived

TeleGram-Scraper

th3unkn0n/telegram-scraper

telegram group scraper tool. fetch all information about group members

data-exfiltrationinformation-gatheringosint+3

1.7k5 years ago

Archived

Geogramint

alb-310/geogramint

An OSINT Geolocalization tool for Telegram that find nearby users and groups 📡🌍🔍

information-gatheringmobile-securityosint+3

7312 years ago

T3SF

base4security/t3sf

Technical Tabletop Exercises Simulation Framework

educationlabs-practice

492 years ago

telegram-nearby-map

tejado/telegram-nearby-map

Maps nearby Telegram users using trilateration of distance data from the official Telegram library and OpenStreetMap, for OSINT and geolocation…

information-gatheringosintprivacy+1

1.2k2 years ago

tgspyder

darksight-analytics/tgspyder

CLI tool for structured Telegram OSINT data collection. Scrapes members, messages, invite links, and user metadata from public/private groups,…

crawlerdata-exfiltrationeducation+4

3599 months ago

Previous 1 2 345 Next