Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for maintaining access, exploring, and expanding control within compromised systems and networks.

Newest Relevance Most popular Recently updated

5343 results

Ladon

k8gege/ladon

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…

privilege-escalationreconnaissancevulnerability-scanners+9

5.3k

1 year ago

CDK

cdk-team/cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

privilege-escalationreconnaissancecontainer-security+7

4.7k3 months ago

PowerUpSQL

netspi/powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

privilege-escalationvulnerability-scannersconfiguration-auditing+4

2.7k1 year ago

OffensiveNim

byt3bl33d3r/offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

privilege-escalationcode-analysislateral-movement+8

3.1k2 years ago

pentest-guide

voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

privilege-escalationvulnerability-analysisinformation-gathering+6

2.8k5 years ago

EvilOSX

marten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

password-crackingprivilege-escalationpayload-generation+6

2.4k5 years ago

pyWhat

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

osintreconnaissancevulnerability-analysis+7

7.3k3 years ago

mosint

alpkeskin/mosint

An automated e-mail OSINT tool

osintreconnaissancedata-exfiltration+2

6.0k2 years ago

redamon

samugit83/redamon

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…

osintpenetration-testing-frameworksprivilege-escalation+8

2.3k1 day ago

ST3GG

elder-plinius/st3gg

All-in-one steganography suite

osintencryption-decryption-toolsdata-exfiltration+8

1.7k2 months ago

androrat

designativedave/androrat

Remote Administration Tool for Android devices

android-securityosintpayload-generation+9

1.6k3 years ago

SILENTTRINITY

byt3bl33d3r/silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

penetration-testing-frameworksexploit-frameworkspost-exploitation+3

2.3k2 years ago

sRDI

monoxgas/srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

memory-forensicsexploitationshellcode+4

2.5k4 years ago

EDRs

mr-un1k0d3r/edrs

Red team tool for EDR evasion: dynamically resolves syscall IDs, patches ntdll stubs, unhooks IAT hooks, and lists hooked APIs from major EDR vendors.

ids-ips-evasionreverse-engineeringpost-exploitation+3

2.2k4 months ago