Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
195 results
PacketSpy preview

PacketSpy

GitHubhalildeniz/packetspy

Network packet sniffer for real-time traffic capture, HTTP inspection, raw payload analysis, and device discovery with built-in man-in-the-middle…

information-gatheringnetwork-securitypacket-sniffing-analysis
1592 years ago
nogotofail preview
Archived

nogotofail

GitHubgoogle/nogotofail

An on-path blackbox network traffic security testing tool

api-security-testingmobile-securitynetwork-security+3
3.0k4 years ago
NetworkAssessment preview

NetworkAssessment

GitHubhalildeniz/networkassessment

NetworkAssessment: Network Compromise Assessment Tool

dns-analysisforensicsintrusion-detection+4
952 years ago
Orbit preview

Orbit

GitHubs0md3v/orbit

Blockchain Transactions Investigation Tool

cryptographyforensicsinformation-gathering+1
6217 years ago
M474 preview

M474

GitHubspyboy-productions/m474

Network Privacy and Security Tool- Change MAC addresses, randomizing internal IP addresses, and renewing IP addresses

educationnetwork-securityprivacy+1
5010 months ago
malcom preview

malcom

GitHubtomchop/malcom

Malcom - Malware Communications Analyzer

malware-analysisnetwork-forensicsthreat-intelligence
1.2k8 years ago
squidmagic preview

squidmagic

GitHubaws-alchemy/squidmagic

analyze a web-based network traffic 🕶 to detect central command and control servers

command-and-controldns-analysisincident-response+3
818 years ago
Filibuster preview

Filibuster

GitHubsubinacls/filibuster

Automated reconnaissance and information-gathering tool for penetration testing, designed to enumerate subdomains, endpoints, and network services.

information-gatheringosintpenetration-testing+3
269 years ago
tunnelx preview

tunnelx

GitHubprojectdiscovery/tunnelx

TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.

authenticationcloud-securitynetwork-security+3
31 month ago
CredNinja preview

CredNinja

GitHubraikia/credninja

A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus…

information-gatheringlateral-movementpenetration-testing
4497 years ago
DNSWatch preview

DNSWatch

GitHubhalildeniz/dnswatch

DNS traffic sniffer and analyzer for monitoring, filtering, and detecting anomalies in DNS queries. Features include PCAP export, DoH support, and a…

defensive-toolsdns-analysisinformation-gathering+2
2171 year ago
CVE-2025-0282-Full-version preview

CVE-2025-0282-Full-version

GitHubanonstorks/cve-2025-0282-full-version

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

binary-exploitationeducationexploitation+5
41 year ago
CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit preview

CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit

GitHubthreatlabindonesia/cve-1999-0524-icmp-timestamp-and-address-mask-request-exploit

Exploit for CVE-1999-0524 that sends ICMP Timestamp and Address Mask requests to expose network information or trigger denial of service. Supports…

exploitationinformation-gatheringnetwork-security+2
31 year ago
MrHandler preview

MrHandler

GitHubemrekybs/mrhandler

SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…

digital-forensicsforensicsincident-response+1
866 months ago
djangohunter preview

djangohunter

GitHubjimywork/djangohunter

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.

information-gatheringmisconfigurationvulnerability-scanners+1
2507 years ago
stretcher preview

stretcher

GitHubjimywork/stretcher

Tool designed to help identify open Elasticsearch servers that are exposing sensitive information

database-securityinformation-gatheringosint+1
907 years ago
reconftw preview

reconftw

GitHubsix2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

cloud-securitydns-analysisdns-subdomain-enumeration+11
8.2k14 days ago
evilwaf preview

evilwaf

GitHubmatrixleons/evilwaf

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

fingerprint-spoofinginformation-gatheringosint+6
8972 months ago
Previous12…11Next