Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.

Kitploit recommended

Top tools

10 selected

evilginx2

kgretzky/evilginx2

15.5k4 months ago

Modlishka

drk1wi/modlishka

5.4k2 months ago

muraena

muraenateam/muraena

1.1k1 year ago

social-engineer-toolkit

trustedsec/social-engineer-toolkit

15.2k4 months ago

gophish

gophish/gophish

14.1k2 years ago

zphisher

htr-tech/zphisher

16.6k2 years ago

sherlock

sherlock-project/sherlock

89.1k26 days ago

maigret

soxoj/maigret

36.5k11 days ago

#10

social-analyzer

qeeqbox/social-analyzer

23.7k9 months ago

#11

wifiphisher

wifiphisher/wifiphisher

14.8k5 months ago

Newest Relevance Most popular Recently updated

114 results

COPG

alirezaparsi/copg

Advanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…

android-securityids-ips-evasionimpersonation-tools+2

36113 days ago

SharpImpersonation

s3cur3th1ssh1t/sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

privilege-escalationimpersonation-toolspost-exploitation+1

4214 years ago

bad_ducky

mharjac/bad_ducky

Rubber Ducky compatible clone based on CJMCU BadUSB HW.

payload-generationids-ips-evasionimpersonation-tools+5

3018 years ago

backdoorppt

r00t-3xp10it/backdoorppt

transform your payload.exe into one fake word doc (.ppt)

phishing-toolspayload-generationimpersonation-tools+2

4686 years ago

AndroidFaker

android1500/androidfaker

Android Faker a Simple Xposed Module Which Spoof Your Device IDs Values. Supporting Android 8.1+

android-securityosint-social-engineeringimpersonation-tools+3

7211 year ago

nord-stream

synacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

exploitationimpersonation-toolsdata-exfiltration+5

3703 months ago

chlonium

rxwx/chlonium

Clone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…

password-crackingphishing-toolsencryption-decryption-tools+6

3163 years ago

squarephish

secureworks/squarephish

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

phishing-toolsimpersonation-toolsphishing+3

3463 years ago

evil-ssdp

initstring/evil-ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

vulnerability-analysisexploitationids-ips-evasion+6

4412 years ago

PowershellKerberos

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

impersonation-toolslateral-movementpost-exploitation+3

3666 months ago

notRDP

dagowda/notrdp

Havoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.

persistence-mechanismsimpersonation-toolsdata-exfiltration+6

25723 days ago

RunPE

nettitude/runpe

C# Reflective loader for unmanaged binaries.

payload-generationimpersonation-toolsshellcode+6

4463 years ago

impersonate

sensepost/impersonate

A windows token impersonation tool

privilege-escalationimpersonation-toolslateral-movement+3

3273 years ago

SharpNamedPipePTH

s3cur3th1ssh1t/sharpnamedpipepth

Pass the Hash to a named pipe for token Impersonation

privilege-escalationpayload-generationimpersonation-tools+5

3104 years ago

PetitPotato

wh0amitz/petitpotato

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

privilege-escalationexploitationimpersonation-tools+3

4663 years ago

GIUDA

foxlox/giuda

Ask a TGS on behalf of another user without password

privilege-escalationexploitationimpersonation-tools+5

4812 years ago

SMSOTPBOT

ghost-otpbot/smsotpbot

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

impersonation-toolsinformation-gatheringphishing+3

2114 years ago

ExtensionSpoofer

henriksb/extensionspoofer

Spoof file icons and extensions in Windows

phishing-toolsids-ips-evasionimpersonation-tools+3

1872 months ago

Previous 1 234 5 6 7 Next