Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

25 results

mfoc

nfc-tools/mfoc

Offline nested attack tool that recovers MIFARE Classic authentication keys using known default or user-supplied keys for assessing NFC/RFID card…

authenticationcryptographyhardware-hacking+3

1.4k

2 years ago

TokenTactics

rvrsh3ll/tokentactics

PowerShell toolkit for Azure JWT token manipulation, enabling token refresh, switching between service-specific tokens (Graph, Outlook, Teams), and…

authenticationcloud-securitypenetration-testing+2

7371 year ago

libfido2

yubico/libfido2

Provides library functionality for FIDO2, including communication with a device over USB or NFC.

authenticationcryptographyhardware-security+2

7261 month ago

Maestro

mayyhem/maestro

Post-exploitation tool that abuses Azure Intune/EntraID via C2 agents for PowerShell execution, device queries, and lateral movement without user…

authenticationcloud-securitycommand-and-control+4

3807 months ago

squarephish

secureworks/squarephish

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

authenticationimpersonation-toolsphishing+3

3463 years ago

Tyr

jb-selfcompany/tyr

True P2P Email on top of Yggdrasil Network for Android

android-securityauthenticationemail-security+4

3461 month ago

ultrablue

anssi-fr/ultrablue

User-friendly Lightweight TPM Remote Attestation over Bluetooth

authenticationbluetooth-securitycryptography+2

1743 years ago

device-pharmer

danmcinerney/device-pharmer

Opens 1K+ IPs or Shodan search results and attempts to login

authenticationinformation-gatheringnetwork-mapping+5

1485 years ago

CVE-2022-40684

carlosevieira/cve-2022-40684

Proof-of-concept exploit for CVE-2022-40684 authentication bypass in Fortinet devices, enabling read-only extraction of admin users and LDAP…

authenticationexploitationpenetration-testing+2

873 years ago

signal-without-smartphone

almet/signal-without-smartphone

Desktop application to register a Signal account and link Signal Desktop without requiring a smartphone, using Signal's cryptographic protocols for…

authenticationencryption-decryption-toolsmobile-security+2

7620 days ago

EasyTokens

secdev02/easytokens

Device-code phishing server for adversary emulation. Captures Microsoft 365 OAuth tokens via Device Authorization Grant flow. Features relay nodes,…

adversarial-attackauthenticationcloud-security+7

721 month ago

Archived

APOLOGEE

rosesecurity/apologee

Python script and Metasploit module that enumerates hidden directories on Siemens BACnet field panels, exploiting an authentication bypass and path…

authenticationexploitationexploit-frameworks+8

501 year ago

tiandy-research

zb3/tiandy-research

This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware. I found two vulnerabilities that could be used to…

authenticationembedded-systems-securityexploitation+7

305 years ago

torchat

blackxploit-404/torchat

Ephemeral P2P chat over Tor with ChaCha20-Poly1305 end-to-end encryption, automatic hidden service setup, self-destructing invites, and QR code…

authenticationeducationencryption-decryption-tools+3

107 months ago

legion

deadends/legion

Passwordless zero-knowledge authentication fabric using Halo2 PLONK proofs, hardware-bound device ring signatures, and BIP-39 recovery phrases for…

authenticationcryptographyhardware-security+3

108 months ago

CVE-2013-6117

milo2012/cve-2013-6117

Exploit tool for CVE-2013-6117, targeting Dahua DVR authentication bypass. Scans IP lists concurrently to extract device credentials via HTTP.

authenticationexploitationiot-security+2

88 years ago

Umbra

openconstruct/umbra

More private by default Firefox ESR. Fork of ghostery.

anti-botauthenticationfingerprint-spoofing+3

65 months ago

mikrotik0dayScanner

m1tn1ck/mikrotik0dayscanner

Scanner for Mikrotik RouterOS 0day credential disclosure via Winbox interface. Exploits improper authentication on port 8291/TCP to download user…

authenticationexploitationinformation-gathering+2

67 years ago

Previous12 Next