Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for creating, managing, and analyzing fake login pages and email campaigns.

Kitploit recommended

Top tools

10 selected

gophish

gophish/gophish

14.1k1 year ago

evilginx2

kgretzky/evilginx2

15.5k3 months ago

social-engineer-toolkit

trustedsec/social-engineer-toolkit

15.2k3 months ago

Modlishka

drk1wi/modlishka

5.4k29 days ago

muraena

muraenateam/muraena

1.1k1 year ago

zphisher

htr-tech/zphisher

16.6k2 years ago

wifiphisher

wifiphisher/wifiphisher

14.8k3 months ago

chlonium

rxwx/chlonium

3163 years ago

#10

SocialFish

undeadsec/socialfish

4.8k3 months ago

#11

CredSniper

ustayready/credsniper

1.4k6 years ago

Newest Relevance Most popular Recently updated

349 results

Awesome-BEC

randomaccess3/awesome-bec

Repository of attack and defensive information for Business Email Compromise investigations

phishing-toolsdigital-forensicscloud-security+7

2782 months ago

SpamChannel

byt3bl33d3r/spamchannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

phishing-toolsimpersonation-toolssocial-engineering+1

3472 years ago

SMSBotBypass

guallagang508/smsbotbypass

otp bot

phishing-toolsimpersonation-toolssocial-engineering+1

5012 years ago

otp-bot

oriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

phishing-toolsimpersonation-toolspenetration-testing+3

3762 years ago

GraphSpy

redbyte1337/graphspy

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

phishing-toolspersistence-mechanismsdata-exfiltration+6

1.4k17 days ago

recaptcha-phish

johnhammond/recaptcha-phish

Phishing with a fake reCAPTCHA

phishing-toolspayload-generationimpersonation-tools+1

6531 year ago

crime-mapper

mr-r3b00t/crime-mapper

A tool for mapping cyber crime

osintphishing-toolsinformation-gathering+3

2417 months ago

tryhackme-monikerlink-writeup

omarmahmoud1024/tryhackme-monikerlink-writeup

TryHackMe Moniker Link (CVE-2024-21413) walkthrough: Outlook Protected View bypass leading to NTLMv2 hash capture via a crafted moniker link.

phishing-toolsvulnerability-analysisexploitation+4

1 month ago

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

george0papasotiriou/cve-2026-22005-oauth-2.0-device-code-phishing-short-interval-

Proof-of-concept for CVE-2026-22005 showing OAuth 2.0 device code phishing via too-short polling interval, with vulnerable Flask server and exploit…

authentication-authorizationphishing-toolsexploitation+4

1 month ago

Reel

trustedsec/reel

Phishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…

phishing-toolsimpersonation-toolsphishing+5

5025 days ago

DroppedConnection

nccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

phishing-toolsimpersonation-toolspenetration-testing+2

1293 years ago

OutlookLeakTest

nccgroup/outlookleaktest

The Outlook HTML Leak Test Project

osintphishing-toolsreconnaissance+5

1298 years ago

Ios-Safari-Mallicous-Extension-Example

spiralbl0ck/ios-safari-mallicous-extension-example

Example on how to injection(currently under work) of keylogger js through Safari Extension(that part done)

phishing-toolsios-securitypayload-generation+3

2 years ago

ca-clone

bishopfox/ca-clone

Scripts to clone CA certificates for use in HTTPS client attacks.

phishing-toolsweb-proxies-interceptionimpersonation-tools+4

376 years ago

xll_windows_reverse_shell

h3x0v3rl0rd/xll_windows_reverse_shell

xll windows reverse shell

phishing-toolsexploitationcommand-and-control+4

1 year ago

camjacking

cappricio-securities/camjacking

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

phishing-toolsimpersonation-toolsinformation-gathering+5

636 months ago

SocialEngineering-Templates

cappricio-securities/socialengineering-templates

a SET framework templates

penetration-testing-frameworksphishing-toolsinformation-gathering+2

6 months ago

SocialEngineering

cappricio-securities/socialengineering

SEt framework

phishing-toolspassword-attacksimpersonation-tools+2

16 months ago

Previous 123…20 Next