Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
76 results
CVE-2025-24813-POC preview

CVE-2025-24813-POC

GitHubla3b0z/cve-2025-24813-poc

CVE-2025-24813-POC JSP Web Shell Uploader

educationexploitationpayload-generation+3
21 year ago
cve-2021-41773-checker preview

cve-2021-41773-checker

GitHubsudo0xksh/cve-2021-41773-checker

A simple Python proof-of-concept tool to check for Apache path traversal vulnerability (CVE-2021-41773). Detects vulnerable server versions and…

educationexploitationpenetration-testing+2
7 months ago
onioff preview

onioff

GitHubk4m4/onioff

🌰 An onion url inspector for inspecting deep web links.

information-gatheringosintreconnaissance+1
7147 years ago
NextRecon preview

NextRecon

GitHubjuoum00000/nextrecon

Advanced Recon tool for Bug Bounty and Pentesting

information-gatheringosintpassword-cracking+3
3310 months ago
Katana preview
Archived

Katana

GitHubc4tcom/katana

Python Tool that gives you the ability to run Advanced Google Queries (Known as Google Dorks - Google Dorking)

educationinformation-gatheringosint+3
1.3k1 year ago
ntlm-scanner preview

ntlm-scanner

GitHubpreempt/ntlm-scanner

A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities

exploitationnetwork-securitypenetration-testing+1
2015 years ago
Apollo preview

Apollo

GitHubobsida-uk/apollo

A simple, lightweight Remote Access Tool written in Python

command-and-controlpayload-generationpenetration-testing+3
167 years ago
Cuteit preview

Cuteit

GitHubd4vinci/cuteit

IP obfuscator made to make a malicious ip a bit cuter

command-and-controlids-ips-evasionpayload-generation+4
5461 year ago
SPF preview

SPF

GitHubtatanus/spf

SpeedPhishing Framework

information-gatheringosintpenetration-testing+3
4497 years ago
tweets_analyzer preview

tweets_analyzer

GitHubx0rz/tweets_analyzer

OSINT tool that scrapes Twitter profile metadata to analyze activity patterns, timezone, language, geolocation, hashtags, and social connections for…

information-gatheringosintreconnaissance+1
3.0k6 years ago
dymerge preview

dymerge

GitHubk4m4/dymerge

🔓 A dynamic dictionary merger for successful dictionary based attacks.

password-attackspassword-crackingutilities-frameworks
2288 years ago
cve-2019-9053-py3 preview

cve-2019-9053-py3

GitHubvedantrana73/cve-2019-9053-py3

Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.

educationexploitationpassword-cracking+3
2 months ago
lapith preview

lapith

GitHubnccgroup/lapith

A simple Nessus results viewer

information-gatheringpenetration-testingvulnerability-analysis
5013 years ago
ShellShockHunter preview

ShellShockHunter

GitHubmrcl0wnlab/shellshockhunter

It's a simple tool for test vulnerability shellshock

exploitationpenetration-testingvulnerability-scanners+1
1245 years ago
Passhunt preview

Passhunt

GitHubviralmaniar/passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their…

information-gatheringpassword-attackspenetration-testing+1
1.3k8 years ago
white-deface preview

white-deface

GitHubwhxitte/white-deface

This is a simple python tool to automatically deface webdav vulnerable websites.

exploitationinformation-gatheringpenetration-testing+1
1771 year ago
Injectus preview
Archived

Injectus

GitHubdubs3c/injectus

CRLF and open redirect fuzzer

fuzzinginformation-gatheringpenetration-testing+3
1134 years ago
nextjs-CVE-2025-29927-hunter preview

nextjs-CVE-2025-29927-hunter

GitHubdarklotuskdb/nextjs-cve-2025-29927-hunter

Next.js CVE-2025-29927 Hunter

exploitationinformation-gatheringpenetration-testing+3
1 year ago
Previous12345Next