Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Password cracking, brute-force, wordlists, and credential testing tools.

Kitploit recommended

Top tools

10 selected

hashcat

hashcat/hashcat

26.5k16h 23m ago

john

openwall/john

13.5k13 days ago

thc-hydra

vanhauser-thc/thc-hydra

12.1k2 months ago

kerbrute

ropnop/kerbrute

3.4k5 years ago

NetExec

pennyw0rth/netexec

5.8k9h 43m ago

impacket

fortra/impacket

16.0k1 day ago

Responder

lgandx/responder

6.5k4 months ago

mimikatz

gentilkiwi/mimikatz

21.8k6 months ago

#10

LaZagne

alessandroz/lazagne

11.0k1 year ago

#11

username-anarchy

urbanadventurer/username-anarchy

1.4k2 years ago

Newest Relevance Most popular Recently updated

908 results

ZeroLogon-Exploit

hell-moon/zerologon-exploit

Modified the test PoC from Secura, CVE-2020-1472, to change the machine password to null

privilege-escalationpassword-attacksvulnerability-analysis+3

15 years ago

CVE-2023-3460

rajneeshkarya/cve-2023-3460

Exploit for the vulnerability of Ultimate Member Plugin.

password-attacksvulnerability-analysisexploitation+2

12 years ago

FTPBuster

s_r_e_e_r_a_j/ftpbuster

FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based…

password-attacksinformation-gatheringpenetration-testing

16 months ago

CVE-2025-24071

royall-researchers/cve-2025-24071

Proof-of-concept for CVE-2025-24071, demonstrating NTLM hash leak via crafted .library-ms file in RAR/ZIP archives, triggering SMB authentication on…

reconnaissancepassword-attacksvulnerability-analysis+3

1 year ago

CVE-2024-28000

alucard0x1/cve-2024-28000

LiteSpeed Cache Privilege Escalation PoC

privilege-escalationpassword-attacksvulnerability-analysis+4

242 years ago

CVE-2021-36394

dinhbaouit/cve-2021-36394

Proof-of-concept exploit for CVE-2021-36394 in Moodle, enabling admin password takeover and remote code execution via custom PHP functions.

password-attacksvulnerability-analysisexploitation+3

135 years ago

vaultwarden-ip-header-spoof

abraxas/vaultwarden-ip-header-spoof

Vaultwarden 1.37.3 default X-Real-IP trusted-local bypasses login rate limits on Docker NAT

defensive-toolspassword-attacksvulnerability-analysis+5

15 days ago

kyocera-cve-2022-1026_SOAP1.1

h4po0n/kyocera-cve-2022-1026_soap1.1

An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords.