Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Password cracking, brute-force, wordlists, and credential testing tools.

Newest Relevance Most popular Recently updated

842 results

Archived

Hijacker

chrisk44/hijacker

Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android

android-securitywi-fi-auditingpassword-attacks+4

2.5k

5 years ago

Archived

bettercap

evilsocket/bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

packet-sniffing-analysisreconnaissancepassword-attacks+3

2.5k8 years ago

reaver-wps-fork-t6x

t6x/reaver-wps-fork-t6x

Brute-force attack tool against WPS registrar PINs to recover WPA/WPA2 passphrases, supporting online brute force and offline Pixie Dust attacks on…

wi-fi-auditingpassword-attacksexploitation+1

2.0k9 months ago

hate_crack

trustedsec/hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

password-crackingpassword-attackshash-analysis+1

1.9k12h 35m ago

Brute_Force

matrix07ksa/brute_force

Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix

password-crackingpassword-attacksweb-security+1

1.8k6 years ago

ALHacking

4lbh4cker/alhacking

Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery,…

osintphishing-toolspassword-attacks+2

1.6k1 year ago

Minimalistic-offensive-security-tools

infosecmatter/minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

password-attacksport-scanningpenetration-testing

5985 years ago

lsarelayx

ccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

password-attacksexploitationpenetration-testing+2

5844 years ago

MSSqlPwner

scorpioneslabs/mssqlpwner

password-attacksexploitationlateral-movement+5

4587 days ago

SQLRecon

xforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

privilege-escalationreconnaissancepassword-attacks+6

3991 year ago

wavecrack

wavestone-cdt/wavecrack

Wavestone's web interface for password cracking with hashcat

password-crackingpassword-attacksweb-security+1

1727 years ago

graphcat

orange-cyberdefense/graphcat

Generate graphs and charts based on password cracking result

password-crackingpassword-attacks

1663 years ago

IMAPLoginTester

rm1984/imaplogintester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to…

password-attacksinformation-gatheringpenetration-testing+1

732 years ago

BlackNET

androvirus/blacknet

Free advanced and modern Windows botnet with a nice and secure PHP panel developed using VB.NET.

password-attacksexploitationdata-exfiltration+3

565 years ago

FaceBrute

emerinohdz/facebrute

Facebook brute forcer script

password-attacksweb-application-exploitationpenetration-testing+2

2714 years ago

lama

tatam/lama

Lama, the application that does not mache these words.

password-crackingpassword-attacksinformation-gathering

237 years ago

CVE-2026-71205-PoC

nel-droid/cve-2026-71205-poc

PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)

password-attacksvulnerability-analysisexploitation+4

4 days ago

CVE-2026-8793

h4zaz/cve-2026-8793

Technical CVE write-up detailing missing brute-force protection in a web admin login form, with PoC reproduction, attack-chain context, and…