Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13620 results
CloudGarrison preview

CloudGarrison

GitHubvighnesh91/cloudgarrison

Offline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs…

cloud-infrastructure-securityidentity-managementvulnerability-analysis+6
9 days ago
severitas preview

severitas

GitHubvighnesh91/severitas

Authorized social-engineering simulation framework with an isolated loopback lab, synthetic audience generation, pre-flight authorization checks, and…

defensive-toolsphishing-toolsosint-social-engineering+6
9 days ago
SearchPhone preview

SearchPhone

GitHubhackunderway/searchphone

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

osintreconnaissancescripting-automation+5
2.0k1 month ago
Arkari preview

Arkari

GitHubkomimoe/arkari

Yet another llvm based obfuscator based on goron.

defensive-toolsstatic-analysiscode-analysis+4
3801 month ago
Overthrone preview

Overthrone

GitHubkarmanya03/overthrone

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

penetration-testing-frameworksprivilege-escalationexploit-frameworks+8
3027 days ago
darkroute preview

darkroute

GitHubdarkcodelabs/darkroute

Anti-ALPR-surveillance PWA. The camera archive lives on the device.

defensive-toolsosintencryption-decryption-tools+5
316 days ago
ESP32-BlueJammer preview

ESP32-BlueJammer

GitHubemenstanougat/esp32-bluejammer

ESP32 and nRF24 based 2.4GHz jammer that disrupts Bluetooth, BLE, WiFi, and RC channels via noise and packet flooding for controlled security testing.

embedded-systems-securitywi-fi-auditingbluetooth-security+6
8.6k6 months ago
webhacklist preview

webhacklist

GitHubirsdl/webhacklist

Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved

vulnerability-analysisinformation-gatheringweb-security+4
8972 days ago
ad_attack_architecture preview

ad_attack_architecture

GitHubkypvas/ad_attack_architecture

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

privilege-escalationreconnaissanceidentity-management+7
421 month ago
red-team-map preview

red-team-map

GitHubkypvas/red-team-map

Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact

privilege-escalationexploitationlateral-movement+7
381 month ago
phantom-grid preview

phantom-grid

GitHubevkir/phantom-grid

Free Burp Collaborator alternative- OOB interaction capture (HTTP/HTTPS/DNS) with SQLite & exfil reassembly

payload-generationvulnerability-analysisweb-application-exploitation+7
12 months ago
BurpIA preview

BurpIA

GitHubdragonjar/burpia

Extensión de Burp Suite que incorpora detección pasiva de vulnerabilidades mediante inteligencia artificial.

defensive-toolsweb-vulnerability-scannersvulnerability-analysis+7
211 month ago
tanuki preview

tanuki

GitHubmafifrizi/tanuki

Tactical Identity Operator for Linux & Hybrid Active Directory

defensive-toolsidentity-managementinformation-gathering+6
183 days ago
EBurst preview

EBurst

GitHubgrayddq/eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。

vulnerability-scannerspassword-attacksinformation-gathering+4
3453 years ago
oss-scanner preview

oss-scanner

GitHubanthropics/oss-scanner

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

defensive-toolsstatic-analysisvulnerability-scanners+7
1.0k2 days ago
geo-sleuth preview

geo-sleuth

GitHuboldcircle/geo-sleuth

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…

osintreconnaissanceosint-social-engineering+4
3.0k4 days ago
hqc-x86-simd preview

hqc-x86-simd

GitHubjihoonjang98/hqc-x86-simd

Optimized HQC post-quantum KEM implementations for AVX2 and AVX-512 with GFNI, plus a unified benchmarking and NIST KAT suite for x86 IoT gateways.

embedded-systems-securityencryption-decryption-toolsiot-security+3
1 month ago
cyrus-sasl preview

cyrus-sasl

GitHubcyrusimap/cyrus-sasl

Cyrus SASL API implementation providing client- and server-side authentication and authorization services via pluggable SASL mechanisms per RFC 4422.

authentication-authorizationnetwork-securitycryptography+3
1601 month ago
Previous1…567…100Next