Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
fakelogonscreen preview

fakelogonscreen

GitHubbitsadmin/fakelogonscreen

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

password-attacksphishing-toolspost-exploitation+2
1.4k
6 years ago
TotalRecall preview

TotalRecall

GitHubxaitax/totalrecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity…

data-exfiltrationexploitationinformation-gathering+5
1646 months ago
printer-cracktro preview

printer-cracktro

GitHubblasty/printer-cracktro

Displays an old-school crack-intro animation on compromised Canon and Lexmark printers, with SDL2 and WebAssembly builds for portability and study.

embedded-systems-securityhardware-iot-securitypayload-development+1
383 years ago
e013 preview

e013

GitHubkeyboard-slayer/e013

VBScript tool that extracts and displays saved Wi-Fi passwords from Windows systems, outputting credentials to a text file for local access.

information-gatheringpassword-attackspost-exploitation+1
275 years ago
young-domain-guard preview

young-domain-guard

GitHubilianazz/young-domain-guard

Browser extension that warns users about recently registered domains to prevent phishing attacks. Queries RDAP to check domain age and displays…

dns-analysisinformation-gatheringphishing+2
71 month ago
iOS-Bluetooth-Ethernet-Exploit preview

iOS-Bluetooth-Ethernet-Exploit

GitHubf4r3sx0/ios-bluetooth-ethernet-exploit

iOS Bluetooth PAN vulnerability that opens USB port 62078 and displays Ethernet icon without any adapter (€0). Apple sells a €89.95 adapter for the…

bluetooth-securityeducationexploitation+8
34 months ago
cve-scanner preview

cve-scanner

GitHubhargabyte/cve-scanner

Local CVE scanner for OpenClaw that checks versions against 522+ known vulnerabilities, displays recent HIGH-severity CVEs, and recommends upgrades.…

configuration-auditingdefensive-toolsdevsecops+3
37 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubkindone09/cve-2025-55182

Automated Python PoC scanner for CVE-2025-55182 targeting Next.js 16.0.6. Reads URLs from file, sends exploit requests, and displays responses for…

exploitationpenetration-testingvulnerability-scanners+1
211 months ago
C-Port-Scanner preview

C-Port-Scanner

GitHubneutralwarrior/c-port-scanner

A port scanner that scans a target IP for open ports and displays the results, built with C

information-gatheringnetwork-mappingpenetration-testing+2
28 months ago
ddos-traffic-monitor preview

ddos-traffic-monitor

GitHubjenderal92/ddos-traffic-monitor

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

anomaly-detectiondefensive-toolsintrusion-detection+2
15 months ago
CVE-2023-6000-POC preview

CVE-2023-6000-POC

GitHubronf98/cve-2023-6000-poc

This vulnerability displays an XSS flaw in a WordPress popup plugin, allowing attackers to inject malicious JavaScript through a stored XSS

exploitationpayload-developmentpenetration-testing+3
11 year ago
ReverseAPK preview

ReverseAPK

GitHub1n3/reverseapk

Quickly analyze and reverse engineer Android packages

android-securitymobile-app-pentestingreverse-engineering+2
8663 years ago
cpufetch preview

cpufetch

GitHubdr-noob/cpufetch

Simple yet fancy CPU architecture fetching tool

general-purpose-utilitieshardware-security
2.1k1 year ago
auto_re preview

auto_re

GitHuba1ext/auto_re

IDA PRO auto-renaming plugin with tagging support

binary-analysisdebuggersreverse-engineering+1
7862 months ago
pgpdump preview

pgpdump

GitHubkazu-yamamoto/pgpdump

A PGP packet visualizer

binary-analysiscryptographyemail-security+1
1871 month ago
Zin preview

Zin

GitHubethicalhackingplayground/zin

A Payload Injector for bugbounties written in go

information-gatheringpenetration-testingweb-application-exploitation
706 years ago
SessionView preview

SessionView

GitHublsecqt/sessionview

A portable C# utility for enumerating local and remote windows sessions

digital-forensicsforensicsincident-response+3
5710 months ago
CVE-2025-45960 preview

CVE-2025-45960

GitHubpracharapol/cve-2025-45960

Proof-of-concept for a stored cross-site scripting (XSS) vulnerability in tawk.to Live Chat 1.6.1, demonstrating JavaScript injection via unsanitized…

exploitationpenetration-testingvulnerability-analysis+2
51 year ago
Previous12Next