Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
128 results
EtwSessionHijacking preview

EtwSessionHijacking

GitHubnul0x4c/etwsessionhijacking

A Poc on blocking Procmon from monitoring network events

adversarial-attackids-ips-evasionpost-exploitation+1
112
1 year ago
OneDriveUpdaterSideloading preview

OneDriveUpdaterSideloading

GitHubchoisg/onedriveupdatersideloading

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post

adversarial-attackpayload-developmentred-teaming+1
1023 years ago
CanaryHunter preview

CanaryHunter

GitHubc0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

adversarial-attackcloud-infrastructure-securityconfiguration-auditing+4
1373 years ago
bordair-multimodal preview

bordair-multimodal

GitHubjosh-blythe/bordair-multimodal

Open-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities.…

adversarial-attackai-securitycurated-resources+5
6729 days ago
ezEmu preview

ezEmu

GitHubjwillyamz/ezemu

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

adversarial-attackdefensive-toolseducation+3
1093 years ago
Fuck-Etw preview

Fuck-Etw

GitHubunkvolism/fuck-etw

Bypass the Event Trace Windows(ETW) and unhook ntdll.

adversarial-attackids-ips-evasionpost-exploitation+1
1162 years ago
LibTP preview

LibTP

GitHubrasta-mouse/libtp

Crystal Palace library for proxying Nt API calls via the Threadpool

adversarial-attackids-ips-evasionpayload-development+2
10710 months ago
BloodfangC2 preview

BloodfangC2

GitHubzarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

adversarial-attackcommand-and-controlpayload-development+4
1051 year ago
NimicStack preview

NimicStack

GitHubfrkngksl/nimicstack

NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs

adversarial-attackids-ips-evasionpost-exploitation+1
954 months ago
BumbleCrypt preview

BumbleCrypt

GitHubknight0x07/bumblecrypt

A Bumblebee-inspired Crypter

adversarial-attackencryption-decryption-toolspayload-development+1
783 years ago
Endurance-Wiper preview

Endurance-Wiper

GitHubintelbroker/endurance-wiper

a small wiper malware programmed in c#

adversarial-attackmalware-analysispayload-development
733 years ago
NimShellcodeFluctuation preview

NimShellcodeFluctuation

GitHubs3cur3th1ssh1t/nimshellcodefluctuation

ShellcodeFluctuation PoC ported to Nim

adversarial-attackpayload-developmentpost-exploitation+2
773 years ago
NSecSoftBYOVD preview

NSecSoftBYOVD

GitHubanylnk/nsecsoftbyovd

NSecSoftBYOVD POC

adversarial-attackexploitationids-ips-evasion+3
626 months ago
FalsePositives preview

FalsePositives

GitHubdidierstevens/falsepositives

Tools that trigger False Positive AV alerts

adversarial-attackdefensive-toolsids-ips-evasion+3
591 year ago
PISmith preview

PISmith

GitHubalbert-y1n/pismith

PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses

adversarial-attackai-securitymachine-learning+3
251 month ago
Kernel_VADInjector preview

Kernel_VADInjector

GitHublleon1435/kernel_vadinjector

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

adversarial-attackids-ips-evasionpayload-development+3
542 years ago
magicNetdefs preview

magicNetdefs

GitHubcrisprss/magicnetdefs

Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged processes to…

adversarial-attackauthenticationexploitation+3
494 years ago
siphondns preview

siphondns

GitHubttpreport/siphondns

Covert data exfiltration via DNS

adversarial-attackcommand-and-controldata-exfiltration+3
531 year ago
Previous1…456…8Next