Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
915 results
blackhat-usa-2022-demos preview

blackhat-usa-2022-demos

GitHubtyranid/blackhat-usa-2022-demos

Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"

authenticationeducationexploitation+4
259
4 years ago
wireshark-rdp preview

wireshark-rdp

GitHubawakecoding/wireshark-rdp

Wireshark RDP resources

authenticationcurated-resourceseducation+3
2221 year ago
CVE-2023-27524 preview

CVE-2023-27524

GitHubhorizon3ai/cve-2023-27524

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset

authenticationexploitationmisconfiguration+3
1132 years ago
CVE-2023-46747-RCE preview

CVE-2023-46747-RCE

GitHubw01fh4cker/cve-2023-46747-rce

Exploit for CVE-2023-46747, a remote code execution vulnerability in F5 BIG-IP, allowing unauthorized user creation and command execution.

authenticationexploitationpenetration-testing+3
2061 year ago
relay_bible preview

relay_bible

GitHubrootsecdev/relay_bible

Technical Reference to multiple relay techniques

authenticationcurated-resourceseducation+8
1943 months ago
printerbugnew preview

printerbugnew

GitHubdecoder-it/printerbugnew

The DCERPC only printerbug.py version

authenticationcommand-and-controlexploitation+5
23410 months ago
Microsoft365_devicePhish preview

Microsoft365_devicePhish

GitHuboptiv/microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

authenticationemail-securitypenetration-testing+4
1075 years ago
modifyCertTemplate preview

modifyCertTemplate

GitHubfortalice/modifycerttemplate

ADCS cert template modification and ACL enumeration

authenticationconfiguration-auditingexploitation+3
1453 years ago
lil-pwny preview

lil-pwny

GitHubpapermtn/lil-pwny

Fast offline auditing of Active Directory passwords using Python.

authenticationpassword-crackingvulnerability-analysis
1672 years ago
spraycharles preview

spraycharles

GitHubtw1sm/spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

authenticationpassword-attackspassword-cracking+2
2247 months ago
ipmi preview

ipmi

GitHubzenfish/ipmi

IPMI stuff from DARPA work

authenticationconfiguration-auditinghardware-security+7
769 days ago
oauthseeker preview

oauthseeker

GitHubpraetorian-inc/oauthseeker

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

authenticationcloud-securityidentity-access-management+6
1791 year ago
MITM6-Kerberos-CNAME-Abuse preview

MITM6-Kerberos-CNAME-Abuse

GitHubbenzamir/mitm6-kerberos-cname-abuse

Kerberos CNAME abuse PoC

authenticationcommand-and-controldns-analysis+5
1097 months ago
CVE-2022-40684 preview

CVE-2022-40684

GitHubcarlosevieira/cve-2022-40684

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

authenticationexploitationpenetration-testing+2
873 years ago
SharePointDumper preview

SharePointDumper

GitHubzh54321/sharepointdumper

PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…

authenticationcloud-securitydata-exfiltration+7
1687 months ago
CredSpy preview

CredSpy

GitHubredbyte1337/credspy

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

authenticationcloud-securityidentity-access-management+5
1691 month ago
raider preview

raider

GitHubowasp/raider

OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions

api-security-testingauthenticationpenetration-testing+3
1013 years ago
CVE-2021-3560-Authentication-Agent preview

CVE-2021-3560-Authentication-Agent

GitHubricterz/cve-2021-3560-authentication-agent

PolicyKit CVE-2021-3560 Exploit (Authentication Agent)

authenticationexploitationpenetration-testing+2
1164 years ago
Previous1…91011…51Next