Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
10 results
F-Scrack preview

F-Scrack

GitHubysrc/f-scrack

Multi-protocol bruteforcer for automated password guessing across network services. Single-file tool designed for security testing.

network-securitypassword-attacks
3088 years ago
CVE-2023-28810 preview

CVE-2023-28810

GitHubskylightcyber/cve-2023-28810

Unauthenticated configuration changer, password brute-forcer, and SIP ghost caller for Hikvision intercom devices exploiting CVE-2023-28810.

embedded-systems-securityexploitationhardware-iot-security+3
3 years ago
HMAC_Bruteforcer preview

HMAC_Bruteforcer

GitHubmbadanoiu/hmac_bruteforcer

Bash-based brute-forcer for HMAC keys, leveraging OpenSSL for hashing and Crunch for generating password lists. Designed for security testing of weak…

cryptographyhash-analysispassword-cracking
7 years ago
legba preview

legba

GitHubevilsocket/legba

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

authenticationinformation-gatheringpassword-attacks+2
1.9k10 days ago
BruteSploit preview
Archived

BruteSploit

GitHubscreetsec/brutesploit

Automated wordlist generator, bruteforcer, and manipulator with an interactive shell for penetration testing and CTF wordlist transformations.

ctfpassword-attackspassword-cracking+3
7746 years ago
JWT-Bruteforcer preview

JWT-Bruteforcer

GitHubrealbatuhan/jwt-bruteforcer

JWT token brute-forcing tool with built-in CVE-2018-1000531 vulnerability test for auditing weak JSON Web Token secrets.

authenticationexploitationpassword-attacks+2
11 year ago
Pikachu-SMTP preview

Pikachu-SMTP

GitHubemrekybs/pikachu-smtp

Simple python script for brute force attack to smtp users

password-attackspenetration-testing
144 months ago
brutespray preview

brutespray

GitHubx90skysn3k/brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+…

password-attackspassword-crackingpenetration-testing
2.5k1 month ago
Blazy preview

Blazy

GitHubs0md3v/blazy

Automated login bruteforcer that intelligently tests credentials against web authentication forms using customizable wordlists and concurrent…

authenticationpassword-attackspassword-cracking+1
9243 years ago
web-brutator preview

web-brutator

GitHubkoutto/web-brutator

Modular web interface bruteforcer with auto-detection of standard authentication forms, supporting 12+ targets (Jenkins, Joomla, Tomcat) and…

password-attackspenetration-testingweb-security
2284 years ago