Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
36 results
WhatWaf preview

WhatWaf

GitHubekultek/whatwaf

Detect and bypass web application firewalls and protection systems

penetration-testingvulnerability-scannerswaf-bypass+1
2.9k
2 years ago
Check Risk WAF preview

Check Risk WAF

GitLabcheck-risk-waf/check-risk-waf

Cloud-based Web Application Firewall (WAF) providing L3/L7 protection against SQLi, XSS, DDoS, and bot attacks. Features AI assistant, anti-bot…

anti-botapi-securitycloud-security+3
2 months ago
ModSecurity preview

ModSecurity

GitHubowasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

api-securityintrusion-detectionlog-analysis+3
9.8k1 month ago
CVE-2025-22963 preview

CVE-2025-22963

GitHubsamplev45/cve-2025-22963
educationpapers-researchvulnerability-analysis+2
1 year ago
ThreatMapper preview

ThreatMapper

GitHubdeepfence/threatmapper

Open Source Cloud Native Application Protection Platform (CNAPP)

cloud-securityconfiguration-auditingcontainer-security+4
5.3k3 months ago
java-html-sanitizer preview

java-html-sanitizer

GitHubowasp/java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

api-securitycode-analysisdefensive-tools+3
9485 months ago
Door404 preview

Door404

GitHubm4dm0e/door404

Web application backdoor builder

defensive-toolseducationexploitation+2
825 years ago
shadowd preview
Archived

shadowd

GitHubzecure/shadowd

The Shadow Daemon web application firewall server

api-securitydefensive-toolsintrusion-detection+3
3063 years ago
snorby preview

snorby

GitHubsnorby/snorby

Ruby On Rails Application For Network Security Monitoring

defensive-toolsincident-responseintrusion-detection+2
1.0k3 years ago
BloodHound preview

BloodHound

GitHubspecterops/bloodhound

Six Degrees of Domain Admin

defensive-toolsidentity-access-managementinformation-gathering+4
3.3k1 day ago
7-Zip-CVE-2025-0411-POC preview

7-Zip-CVE-2025-0411-POC

GitHubdhmosfunk/7-zip-cve-2025-0411-poc

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

exploitationmalware-analysisphishing+2
1551 year ago
CVE-2026-73847-emlog-PoC preview

CVE-2026-73847-emlog-PoC

GitHubsqueeze440/cve-2026-73847-emlog-poc

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)

exploitationpenetration-testingvulnerability-analysis+2
7 days ago
CVE-2025-70899 preview

CVE-2025-70899

GitHubmathavamoorthi/cve-2025-70899
exploitationpenetration-testingvulnerability-analysis+2
7 months ago
CVE-2023-33409 preview

CVE-2023-33409

GitHubthirukrishnan/cve-2023-33409
exploitationpenetration-testingvulnerability-analysis+2
3 years ago
CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability preview

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

GitHubersinerenler/cve-2023-46014-code-projects-blood-bank-1.0-sql-injection-vulnerability
exploitationpenetration-testingvulnerability-analysis+1
2 years ago
CVE-2022-41040_Mitigation preview

CVE-2022-41040_Mitigation

GitHubcentariscyber/cve-2022-41040_mitigation
defensive-toolsexploitationmisconfiguration+2
3 years ago
PoW-Shield preview

PoW-Shield

GitHubruisiang/pow-shield

Project dedicated to fight Layer 7 DDoS with proof of work, with an additional WAF and controller. Completed with full set of features and…

web-security
4101 year ago
openrasp preview

openrasp

GitHubbaidu/openrasp

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

anomaly-detectiondefensive-toolsdevsecops+2
3.0k10 months ago
Previous12Next