Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Password cracking, brute-force, wordlists, and credential testing tools.

Newest Relevance Most popular Recently updated

843 results

Cr3dOv3r

d4vinci/cr3dov3r

Know the dangers of credential reuse attacks.

osintpassword-attacksinformation-gathering+1

2.1k8 months ago

pwn_jenkins

gquere/pwn_jenkins

Notes about attacking Jenkins servers

password-attacksvulnerability-analysisexploitation+6

2.1k2 years ago

KitHack

adrmxr/kithack

Hacking tools pack & backdoors generator.

android-securitypenetration-testing-frameworkswi-fi-auditing+6

2.1k1 year ago

SocialBox

cyb0r9/socialbox

Brute-force attack framework targeting social media platforms (Facebook, Gmail, Instagram, Twitter) with automated credential testing and account…

password-attacksinformation-gatheringsocial-engineering

2.0k7 years ago

PassGAN

brannondorsey/passgan

A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)

password-crackingpassword-attacksmachine-learning+2

2.0k7 years ago

Archived

unshackle

fadi002/unshackle

Open-source tool to bypass windows and linux passwords from bootable usb

authentication-authorizationprivilege-escalationpassword-attacks+3

2.0k2 years ago

legba

evilsocket/legba

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

password-crackingpassword-attacksinformation-gathering+2

1.9k6 days ago

SharpSploit

cobbr/sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

privilege-escalationpassword-attackspersistence-mechanisms+9

1.9k5 years ago

TIDoS-Framework

0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

osintreconnaissancevulnerability-scanners+7

1.9k5 years ago

Invoke-TheHash

kevin-robertson/invoke-thehash

PowerShell Pass The Hash Utils

password-attackslateral-movementpost-exploitation+3

1.8k7 years ago

odat

quentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

privilege-escalationvulnerability-scannerspassword-attacks+4

1.8k4 months ago

pixiewps

wiire-a/pixiewps

An offline Wi-Fi Protected Setup brute-force utility

wi-fi-auditingpassword-attacksexploitation+2

1.7k4 months ago

Chrome-App-Bound-Encryption-Decryption

xaitax/chrome-app-bound-encryption-decryption

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

encryption-decryption-toolspassword-attacksexploitation+5

1.7k6 months ago

LadonGo

k8gege/ladongo

Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle…

reconnaissancevulnerability-scannerspassword-attacks+5

1.7k2 years ago

Internal-Monologue

eladshamir/internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

password-attackslateral-movementpost-exploitation+2

1.7k7 years ago

requests-ip-rotator

ge0rg3/requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

password-attacksweb-proxies-interceptionids-ips-evasion+5

1.7k1 month ago

Yasso

sairson/yasso

强大的内网渗透辅助工具集-让Yasso像风一样支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库…