Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.

Kitploit recommended

Top tools

10 selected

sliver

bishopfox/sliver

11.7k15h 1m ago

metasploit-framework

rapid7/metasploit-framework

38.8k13h 59m ago

Empire

bc-security/empire

5.2k1 month ago

Mythic

its-a-feature/mythic

4.7k12 days ago

NetExec

pennyw0rth/netexec

5.8k16h 38m ago

impacket

fortra/impacket

16.0k2 days ago

BloodHound-Legacy

specterops/bloodhound-legacy

10.6k7 months ago

#10

mimikatz

gentilkiwi/mimikatz

21.8k6 months ago

#11

Rubeus

ghostpack/rubeus

5.1k11 months ago

#12

PEASS-ng

peass-ng/peass-ng

20.3k1 day ago

Newest Relevance Most popular Recently updated

5410 results

MSSQL-Analysis-Coerce

p0dalirius/mssql-analysis-coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

exploitationlateral-movementpost-exploitation+3

1333 years ago

slui-file-handler-hijack-privilege-escalation

bytecode77/slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack UAC Bypass Local Privilege Escalation

privilege-escalationexploitationpost-exploitation+1

951 year ago

cve-2022-41352-zimbra-rce

cr4ckc4t/cve-2022-41352-zimbra-rce

Zimbra <9.0.0.p27 RCE

payload-generationvulnerability-analysisexploitation+3

1093 years ago

security-research

mirchr/security-research

Security Research

password-crackingprivilege-escalationvulnerability-analysis+5

941 year ago

CVE-2022-27925-PoC

vnhacker1337/cve-2022-27925-poc

Zimbra RCE simple poc

vulnerability-analysisexploitationweb-application-exploitation+2

654 years ago

Azur3Alph4

hyd3sec/azur3alph4

PowerShell module for post-breach Azure red teaming, automating token extraction, resource enumeration, and lateral movement within managed identity…

privilege-escalationinformation-gatheringpost-exploitation+3

635 years ago

PowerExfil

1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

scripting-automationdata-exfiltrationpenetration-testing+3

966 years ago

Reverse_HTTPS_Bot

ahhh/reverse_https_bot

A python based https remote access trojan for penetration testing

post-exploitationpenetration-testingcommand-and-control+3

8410 years ago

winsos-poc

thiagopeixoto/winsos-poc

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

exploitationpost-exploitationred-teaming+2

1122 years ago

DCVC2

3nailsinfosec/dcvc2

Discord voice channel C2 framework for covert command and control operations. Transmits all data via RTP packets over voice channels, leaving no…

data-exfiltrationpost-exploitationcommand-and-control+2

1311 year ago

PeekABoo

viralmaniar/peekaboo

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell…

post-exploitationpenetration-testingred-teaming+1

1437 years ago

pcybox-attackgraph

mister-iks/pcybox-attackgraph

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

defensive-toolsnetwork-securityctf+5

4728 days ago

egression

danielmiessler/egression

Test a network's egress controls with various levels of success and failure.

data-exfiltrationnetwork-securitypenetration-testing+1

1079 years ago

DynastyPersist

trevohack/dynastypersist

Linux persistence toolkit with 11 modules for SSH key backdoors, cronjobs, systemd services, LKM rootkits, and LD_PRELOAD privilege escalation.…

privilege-escalationpersistence-mechanismspost-exploitation+3

1621 year ago

SharpWhispers

secforce/sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

ids-ips-evasionshellcodepost-exploitation+2

1123 years ago

CVE-2024-53677-S2-067

tam-k592/cve-2024-53677-s2-067

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute…

vulnerability-analysisexploitationweb-application-exploitation+3

961 year ago

enumhandles_BOF

octoberfest7/enumhandles_bof

Cobalt Strike BOF for live Windows enumeration of open file handles, revealing which process has locked a target file on disk during…

reconnaissanceinformation-gatheringpost-exploitation+2

1272 years ago

impersonate-rs

zblurx/impersonate-rs

Rusty Impersonate

privilege-escalationexploitationimpersonation-tools+4

1071 year ago

Previous 1…979899 100 Next