Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.

Kitploit recommended

Top tools

10 selected

sliver

bishopfox/sliver

11.7k10 days ago

metasploit-framework

rapid7/metasploit-framework

38.8k16h 34m ago

Empire

bc-security/empire

5.2k1 month ago

Mythic

its-a-feature/mythic

4.7k23 days ago

NetExec

pennyw0rth/netexec

5.8k2 days ago

impacket

fortra/impacket

16.0k17h 11m ago

BloodHound-Legacy

specterops/bloodhound-legacy

10.6k8 months ago

#10

mimikatz

gentilkiwi/mimikatz

21.8k4 days ago

#11

Rubeus

ghostpack/rubeus

5.1k11 months ago

#12

PEASS-ng

peass-ng/peass-ng

20.3k1 day ago

Newest Relevance Most popular Recently updated

5449 results

EvilnoVNC

joelgmsec/evilnovnc

Real-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…

password-crackingphishing-toolsinformation-gathering+3

1.2k1 year ago

metta

uber-common/metta

An information security preparedness tool to do adversarial simulation.

defensive-toolsprivilege-escalationreconnaissance+8

1.1k8 years ago

wp2shell-poc

icex0/wp2shell-poc

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

vulnerability-analysisexploitationweb-application-exploitation+5

7372 months ago

Chrome-App-Bound-Encryption-Decryption

xaitax/chrome-app-bound-encryption-decryption

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

encryption-decryption-toolspassword-attacksexploitation+5

1.7k8 months ago

OffSec-Reporting

syslifters/offsec-reporting

Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool

penetration-testingutilities-frameworkseducation+3

9322 months ago

Invisi-Shell

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

defensive-toolsprivilege-escalationexploitation+9

1.3k7 years ago

CatSniffer

electroniccats/catsniffer

CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the…

packet-sniffing-analysisbluetooth-securityiot-security+7

92921 days ago

rogue-jndi

veracode-research/rogue-jndi

A malicious LDAP server for JNDI injection attacks

exploitationweb-application-exploitationctf+4

1.1k5 years ago

DarkLoadLibrary

bats3c/darkloadlibrary

LoadLibrary for offensive operations

defensive-toolsexploitationbinary-analysis+2

1.2k5 years ago

ProcessInjection

3xpl01tc0d3r/processinjection

This program is designed to demonstrate various process injection techniques

privilege-escalationencryption-decryption-toolsexploitation+5

1.3k1 year ago

mitm6

dirkjanm/mitm6

Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…

information-gatheringnetwork-securitypenetration-testing+3

1.9k4 years ago

follina.py

chvancooten/follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

payload-generationexploitationpenetration-testing+1

1.1k3 years ago

Nemesis

specterops/nemesis

Centralized data enrichment platform for offensive security assessments that ingests, enriches, and enables collaborative analysis of collected files…

osintinformation-gatheringpost-exploitation+3

9931 day ago