Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

520 results

attackmapper

baymaxpop23/attackmapper

attackmapper

cloud-securitynetwork-mappingpenetration-testing+4

29 months ago

CVE-2025-5349-Scanner

olimpiofreitas/cve-2025-5349-scanner

Python-based scanner for CVE-2025-5349 that probes IP ranges and hosts on HTTP/HTTPS ports to detect vulnerable Citrix NetScaler instances.

exploitationnetwork-mappingpenetration-testing+3

11 year ago

CVE-2019-0708-Batch-Blue-Screen

zhaoyukai/cve-2019-0708-batch-blue-screen

改写某大佬写的0708蓝屏脚本改为网段批量蓝屏

exploitationnetwork-mappingpenetration-testing+2

7 years ago

CVE-2024-47176

0x7556/cve-2024-47176

Unix CUPS打印系统远程代码执行漏洞

exploitationnetwork-mappingpenetration-testing+3

4 months ago

Windows-ZTE-Loader

injectionmethod/windows-zte-loader

Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar

exploitationnetwork-mappingport-scanning+2

3 years ago

cve-2024-10914-port

retuci0/cve-2024-10914-port

dlink vulnerability thing in python and rust

exploitationnetwork-mappingpenetration-testing+3

1 year ago

CVE-2022-1388

m4fiab0y/cve-2022-1388

Scan IP ranges for IP's vulnerable to the F5 Big IP exploit (CVE-2022-1388)

exploitationnetwork-mappingreconnaissance+2

3 years ago

libSSH-bypass

0xadaw/libssh-bypass

Implementation of CVE-2018-10933 with CIDR block scanner

exploitationnetwork-mappingpenetration-testing+2

7 years ago

Review.CVE-2023-5612

constantinefedorov/review.cve-2023-5612

Proof-of-concept and analysis for CVE-2023-5612, a GitLab CE/EE webhook SSRF. Includes curl PoC steps and custom NSE scripts to verify and…

exploitationnetwork-mappingpenetration-testing+4

1 year ago

CVE-2021-44228

vnyui/cve-2021-44228

Mass recognition tool for CVE-2021-44228

exploitationnetwork-mappingreconnaissance+2

4 years ago

reachability

jsmit260/reachability

Are the target ranges reachable?

network-mappingpenetration-testingport-scanning+1

5 years ago

UA3F

sunbk201/ua3f

Transparent HTTP(S) rewriting proxy supporting HTTP, SOCKS5, TPROXY, REDIRECT and NFQUEUE modes with HTTPS MitM, rule-based header/body rewriting and…

anti-botnetwork-mappingnetwork-security+5

68928 days ago

Archived

ip-https-tools

takeshixx/ip-https-tools

Tools for the IP over HTTPS (IP-HTTPS) Tunneling Protocol

dns-analysisnetwork-mappingnetwork-security+3

911 years ago

scapy

secdev/scapy

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

bluetooth-securitycryptographydata-exfiltration+23

12.5k13h 49m ago

whosthere

ramonvermeulen/whosthere

Local Area Network discovery tool with an interactive Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an…

dns-analysisinformation-gatheringnetwork-mapping+3

2.4k1 day ago

nmap

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18

13.3k19h 9m ago

Sirius

siriusscan/sirius

Open-source vulnerability scanner with automated network discovery, CVE-based detection, CVSS scoring, risk dashboards, remote agents via gRPC, and a…

api-securitycloud-securitycontainer-security+6

1.7k2 months ago

metabigor

j3ssie/metabigor

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+6

1.7k2 months ago

Previous 1…345…29 Next