Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

13625 results

CVE-2021-41773

emaar1x/cve-2021-41773

Educational Docker lab for Apache HTTP Server 2.4.49 path traversal and RCE (CVE-2021-41773) with CVE research, PoC exploit, testing evidence, and…

vulnerability-analysisexploitationweb-application-exploitation+4

2 months ago

zombieguard

mdshoaibuddinchanda/zombieguard

ML-based detection of Zombie ZIP archive header evasion attacks (CVE-2026-0866)

defensive-toolsstatic-analysisvulnerability-scanners+4

327 days ago

ResetNightmare-impacket

mihat2/resetnightmare-impacket

CVE-2026-27912 (ResetNightmare) — Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC

password-attacksvulnerability-analysisexploitation+4

12 months ago

SSRF-Testing

cujanovic/ssrf-testing

SSRF (Server Side Request Forgery) testing resources

payload-generationweb-application-exploitationinformation-gathering+6

2.5k2 years ago

MDE-AuditCheck

olafhartong/mde-auditcheck

MDE relies on some of the Audit settings to be enabled

defensive-toolsconfiguration-auditingmisconfiguration

1014 years ago

MSRC-Security-Research

microsoft/msrc-security-research

Security Research from the Microsoft Security Response Center (MSRC)

vulnerability-analysisexploitationpapers-research+1

1.4k2 years ago

GarbageMan

withsecurelabs/garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

memory-forensicsreverse-engineeringdata-exfiltration+3

1213 years ago

maya

elfmaster/maya

Highly advanced Linux anti-exploitation and anti-tamper binary protector for ELF.

defensive-toolscode-analysisreverse-engineering+2

1614 years ago

SymCrypt-OpenSSL

microsoft/symcrypt-openssl

OpenSSL engine for use with SymCrypt cryptographic library

encryption-decryption-toolshash-analysiscryptography

803 months ago

siofra

cybereason/siofra

Simulates the Windows PE loader to identify DLL hijacking vulnerabilities, generates weaponized DLLs with shellcode payloads, and detects UAC…

privilege-escalationvulnerability-scannerspayload-generation+4

5119 years ago

Malware-Analysis

dodo-sec/malware-analysis

Curated collection of in-depth malware analysis write-ups organized as a reference for security researchers, reverse engineers, and incident…

malware-analysiseducationcurated-resources

1383 years ago

decode-spam-headers

mgeeky/decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

phishing-toolsinformation-gatheringred-teaming+2

6988 months ago

XSS2Shell-CVE-2026-64638

yogagymn/xss2shell-cve-2026-64638

Authorized WordPress XSS-to-RCE scanner with concurrent multi-target XSS reflection and version fingerprint detection, plus optional exploitation…

reconnaissanceweb-vulnerability-scannersexploitation+4

12 months ago

SnaffPoint

nheiniger/snaffpoint

A tool for pointesters to find candies in SharePoint

reconnaissanceinformation-gatheringpenetration-testing+3

2883 years ago

MSSQL-Analysis-Coerce

p0dalirius/mssql-analysis-coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

exploitationlateral-movementpost-exploitation+3

1333 years ago

OSINT_Inception-links

c3n7ral051nt4g3ncy/osint_inception-links

Current links from the OSINT Inception start-me project

osintreconnaissanceinformation-gathering+3

2133 years ago

macos-UnifiedLogs

mandiant/macos-unifiedlogs

A cross platform parser for Apple UnifiedLogs!

forensicsdigital-forensicsincident-response+1

3678 days ago

HardeningKitty

scipag/hardeningkitty

HardeningKitty - Checks and hardens your Windows configuration

authentication-authorizationdefensive-toolsvulnerability-analysis+2

1.8k3 months ago

Previous 1…969798…100 Next