Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
52 results
CVE-2019-16920-MassPwn3r preview

CVE-2019-16920-MassPwn3r

GitHubeniac888/cve-2019-16920-masspwn3r

Automated mass exploitation tool for CVE-2019-16920 command injection vulnerability in multiple D-Link routers, enabling unauthenticated remote code…

command-and-controlexploitationpenetration-testing+3
1
6 years ago
HolyGrail preview

HolyGrail

GitHubblacksnufkin/holygrail

BYOVD hunter to help prioritize windows drivers worth manual analysis

binary-analysisexploitationpenetration-testing+2
1321 year ago
EuConform preview

EuConform

GitHubhiepler/euconform

EU AI Act Compliance Tool - Risk classification and bias testing

ai-securitycurated-resourceseducation+3
1234 months ago
uefi_retool preview
Archived

uefi_retool

GitHubyeggor/uefi_retool

A tool for UEFI firmware reverse engineering

binary-analysisembedded-systems-securityfirmware-analysis+3
3681 year ago
phpunit-brute preview

phpunit-brute

GitHubrandomrobbiebf/phpunit-brute

Tool to try multiple paths for PHPunit RCE CVE-2017-9841

exploitationinformation-gatheringpenetration-testing+3
304 years ago
lynis preview

lynis

GitHubcisofy/lynis

Agentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…

configuration-auditingdatabase-securitydefensive-tools+5
16.2k20 days ago
pgedge-anonymizer preview

pgedge-anonymizer

GitHubpgedge/pgedge-anonymizer

An anonymizer tool for replacing PII and similar data in dev/test databases copied from production

database-securitydata-exfiltrationdevsecops+3
3028 days ago
probo preview

probo

GitHubgetprobo/probo

Open source solutions for SOC2, GDPR, and ISO27001

cloud-securitydefensive-toolsdevsecops+3
1.3k1 day ago
Claude-Skills-Governance-Risk-and-Compliance preview

Claude-Skills-Governance-Risk-and-Compliance

GitHubsushegaad/claude-skills-governance-risk-and-compliance

Installable Claude Skills providing expert-level compliance guidance for 30+ frameworks including ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF,…

ai-securitycloud-securitycurated-resources+5
8521 day ago
lunasec preview

lunasec

GitHublunasec-io/lunasec

Open-source dependency vulnerability scanner and supply chain security platform. Automatically detects CVEs in pull requests and builds, generates…

devsecopssecret-detectionsupply-chain-security+1
1.5k2 years ago
DirDar preview

DirDar

GitHubm4dm0e/dirdar

Go-based tool to bypass 403-forbidden directories, enumerate directory listings, and discover hidden resources during web application security…

information-gatheringpenetration-testingvulnerability-scanners+1
4532 years ago
ethibench preview

ethibench

GitHubjd0965199-oss/ethibench

Evaluation framework for AI penetration testing agents that measures validated vulnerability discovery using LLM-based semantic matching, bipartite…

ai-securityeducationmachine-learning+4
3 months ago
goaccess preview

goaccess

GitHuballinurl/goaccess

Real-time web log analyzer and interactive viewer for terminal or browser. Parses Apache, Nginx, and other formats to deliver fast HTTP statistics,…

anomaly-detectiongeneral-purpose-utilitieslog-analysis+1
20.8k5 days ago
CVE-2023-43284 preview

CVE-2023-43284

GitHubmateustesser/cve-2023-43284

DLink DIR-846 Authenticated Remote Code Execution

exploitationpenetration-testingremote-access-tool+2
182 years ago
CVE-2016-0040 preview

CVE-2016-0040

GitHubde7ec7ed/cve-2016-0040

64-bit Windows kernel privilege escalation exploit for CVE-2016-0040 (WMI Receive Notification vulnerability) using GDI bitmap manipulation for token…

binary-exploitationexploitationpayload-development+3
139 years ago
novahot preview
Archived

novahot

GitHubchrisallenlane/novahot

A webshell framework for penetration testers.

command-and-controlexploit-frameworkspayload-generation+3
2991 year ago
EU_compliance_MCP preview
Archived

EU_compliance_MCP

GitHubansvar-systems/eu_compliance_mcp

MCP server providing structured, full-text access to EU regulations (GDPR, DORA, NIS2, AI Act) with cross-referencing, control mappings, and…

api-securitycloud-securitycurated-resources+5
251 month ago
CVE-2024-6651 preview

CVE-2024-6651

GitHubyup-ivan/cve-2024-6651

Functional proof-of-concept exploit for Reflected Cross-Site Scripting (XSS) in WordPress WP File Upload plugin versions below 4.24.8, targeting the…

educationexploitationpenetration-testing+2
17 months ago
Previous123Next