Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
920 results
cipherscan preview

cipherscan

GitHubmozilla/cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.

configuration-auditingcryptographynetwork-security+1
2.0k1 year ago
ssl-certificate-expiry-date-checker preview

ssl-certificate-expiry-date-checker

GitHubpassword123456/ssl-certificate-expiry-date-checker

Scans SSL/TLS certificates for expiry dates, issuer details, and OCSP status. Sends notifications via webhook, Telegram, or Slack. Supports proxy per…

configuration-auditingcryptographylog-analysis+2
123 years ago
regexploit preview

regexploit

GitHubdoyensec/regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

fuzzingstatic-code-analysisvulnerability-analysis
8505 years ago
scanner-for-CVE-2025-55182-vulnerability preview

scanner-for-CVE-2025-55182-vulnerability

GitHubshakilkhatri/scanner-for-cve-2025-55182-vulnerability

CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean…

code-analysisdevsecopssecret-detection+3
9 months ago
shotlooter preview

shotlooter

GitHubutkusen/shotlooter

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

data-exfiltrationinformation-gatheringosint+2
6491 year ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubjaycelation/cve-2025-55182

PoC, Hunting React2Shell about CVE-2025-55182

exploitationosintpenetration-testing+3
9 months ago
uDork preview

uDork

GitHubm3n0sd0n4ld/udork

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find…

information-gatheringosintreconnaissance+2
8664 years ago
CVE-2022-28171-POC preview

CVE-2022-28171-POC

GitHubnyameeeain/cve-2022-28171-poc

Python exploit for CVE-2022-28171 targeting Hikvision Hybrid SAN devices, automating blind SQL injection and command injection to achieve remote code…

code-analysisexploitationiot-security+3
43 years ago
LinksysLeaks preview

LinksysLeaks

GitHubjollyjumbuckk/linksysleaks

Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244

educationexploitationinformation-gathering+5
63 years ago
Pentest-Cheat-Sheet preview

Pentest-Cheat-Sheet

GitHubd0n601/pentest-cheat-sheet

There are many cheat sheets out there, but this is mine.

curated-resourceseducationexploitation+7
381 year ago
echidna preview

echidna

GitHubcrytic/echidna

Ethereum smart contract fuzzer

fuzzingvulnerability-analysis
3.2k1 day ago
NotEnough preview

NotEnough

GitHubcaoweiquan322/notenough

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

binary-exploitationexploitationfuzzing+3
252 years ago
retire.js preview

retire.js

GitHubbekk/retire.js

retire.js has a new home

code-analysisdevsecopsstatic-code-analysis+3
1911 years ago
CVE-2021-33624 preview

CVE-2021-33624

GitHubbenschlueter/cve-2021-33624

Proof of Concept for CVE-2021-33624

binary-exploitationexploitationmemory-forensics+1
35 years ago
jfrog-CVE-2022-24675 preview

jfrog-CVE-2022-24675

GitHubjfrog/jfrog-cve-2022-24675

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

binary-analysiscode-analysisstatic-code-analysis+2
4 years ago
UhOh365 preview

UhOh365

GitHubraikia/uhoh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled,…

email-harvestinginformation-gatheringosint+2
6075 years ago
CVE-2024-1698-Exploit preview

CVE-2024-1698-Exploit

GitHubkamranhasan/cve-2024-1698-exploit

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.

educationexploitationpassword-attacks+3
82 years ago
wordpress-php-object-helper preview

wordpress-php-object-helper

GitHubrandomrobbiebf/wordpress-php-object-helper

Know a plugin has a php object exploit but need to find which lib to use?

exploit-frameworkspenetration-testingreconnaissance+3
33 years ago
Previous12…52Next