Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for extracting sensitive data from compromised systems without detection.

Newest Relevance Most popular Recently updated

649 results

DNSlivery

no0be/dnslivery

Easy files and payloads delivery over DNS

data-exfiltrationpenetration-testingcommand-and-control+1

4267 months ago

pwnbin

kahunalu/pwnbin

Python Pastebin Webcrawler that returns list of public pastebins containing keywords

osintdata-exfiltrationinformation-gathering+1

4506 years ago

SlackPirate

emtunc/slackpirate

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

osintdata-exfiltrationinformation-gathering+3

7801 year ago

moukthar

tomiwa-ot/moukthar

Android remote administration tool

android-securitypayload-generationpersistence-mechanisms+6

6759 months ago

physmem2profit

reverseclabs/physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

memory-forensicspassword-attacksdata-exfiltration+4

4224 years ago

SAMDump

ricardojoserf/samdump

Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. Implemented in C#, C++,…

privilege-escalationencryption-decryption-toolsdata-exfiltration+3

3723 days ago

DataSurgeon

drew-alleman/datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

osintreconnaissancehash-analysis+6

9002 years ago

njRAT

mwsrc/njrat

njRAT SRC Extract

privilege-escalationpayload-generationpersistence-mechanisms+9

3109 years ago

nord-stream

synacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

exploitationimpersonation-toolsdata-exfiltration+5

3701 month ago

phishlulz

antisnatchor/phishlulz

phishing-toolsdata-exfiltrationinformation-gathering+4

3379 years ago

MemFiles

octoberfest7/memfiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

data-exfiltrationpost-exploitationcommand-and-control+1

4772 years ago

CrossSiteContentHijacking

nccgroup/crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

vulnerability-analysisweb-application-exploitationdata-exfiltration+3

3857 years ago

Uscrapper

z0m31en7/uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface…

osintreconnaissancedata-exfiltration+4

7871 year ago

JS-Tap

hoodoer/js-tap

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

phishing-toolsreconnaissancepersistence-mechanisms+8

4741 month ago

CallStranger

yunuscadirci/callstranger

Vulnerability checker for Callstranger (CVE-2020-12695)

vulnerability-scannersiot-securityport-scanning+3

4035 years ago

StegoForge

nour833/stegoforge

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

encryption-decryption-toolsmemory-forensicsnetwork-forensics+8

5753 months ago

FFM

justicerage/ffm

Freedom Fighting Mode: open source hacking harness

privilege-escalationlateral-movementdata-exfiltration+6

3494 months ago

telegram-history-dump

tvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…