Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
112 results
CVE-2017-7921 preview

CVE-2017-7921

GitHub0xf3d0rq/cve-2017-7921

CVE-2017-7921 is a critical vulnerability (CVSS score: 9.8) affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems…

authenticationexploitationinformation-gathering+3
1
11 months ago
CVE-2026-20127 preview

CVE-2026-20127

GitHubrandeepajayasekara/cve-2026-20127

Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane.

authenticationeducationexploitation+3
8 months ago
CVE-2024-4040 preview

CVE-2024-4040

GitHubmufti22/cve-2024-4040

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote…

authenticationexploitationpenetration-testing+3
2 years ago
gMSA_Dumper preview

gMSA_Dumper

GitHubh3x0v3rl0rd/gmsa_dumper

Python utility that reads accessible gMSA password blobs from Active Directory and extracts plaintext passwords for use in security audits and red…

authenticationinformation-gatheringpassword-attacks+2
2 years ago
Hack-Captive-Portal preview
Archived

Hack-Captive-Portal

GitHubpriyankvadaliya/hack-captive-portal

This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and…

authenticationimpersonation-toolsnetwork-access-control+2
328 years ago
raider preview
Archived

raider

GitHubdigeex/raider

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

api-security-testingauthenticationpenetration-testing+1
1395 years ago
zend-crypt preview
Archived

zend-crypt

GitHubzendframework/zend-crypt

Cryptographic component from Zend Framework

authenticationcryptographyencryption-decryption-tools
876 years ago
lil-pwny preview

lil-pwny

GitHubpapermtn/lil-pwny

Fast offline auditing of Active Directory passwords using Python.

authenticationpassword-crackingvulnerability-analysis
1672 years ago
keepassxc preview

keepassxc

GitHubkeepassxreboot/keepassxc

Secure offline storage of credentials with encrypted vaults, password generator, TOTP, YubiKey/OnlyKey support, browser integration, and CLI.

authenticationcryptographyencryption-decryption-tools+1
29.8k1 day ago
patator preview

patator

GitHublanjelot/patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

authenticationdns-analysishash-analysis+6
3.9k1 year ago
kerbrute preview

kerbrute

GitHubropnop/kerbrute

A tool to perform Kerberos pre-auth bruteforcing

authenticationinformation-gatheringlateral-movement+3
3.4k5 years ago
VibeSec-Skill preview

VibeSec-Skill

GitHubbehisecc/vibesec-skill

This skill helps Claude write secure code and prevent common vulnerabilities.

ai-securityapi-securityauthentication+8
1.1k8 months ago
PrivExchange preview

PrivExchange

GitHubdirkjanm/privexchange

Exchange your privileges for Domain Admin privs by abusing Exchange

authenticationexploitationpenetration-testing+1
1.1k6 years ago
ad-password-protection preview

ad-password-protection

GitHublithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

authenticationconfiguration-auditingidentity-access-management+1
57310 days ago
SMSBotBypass preview

SMSBotBypass

GitHubguallagang508/smsbotbypass

otp bot

authenticationimpersonation-toolsphishing-tools+1
5015 years ago
otp-bot preview

otp-bot

GitHuboriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

authenticationimpersonation-toolspenetration-testing+3
3765 years ago
ad-ldap-enum preview

ad-ldap-enum

GitHubcrowecybersecurity/ad-ldap-enum

An LDAP based Active Directory user and group enumeration tool

authenticationinformation-gatheringpenetration-testing+1
3136 months ago
ldap_shell preview

ldap_shell

GitHubpshlyundin/ldap_shell

Interactive shell for Active Directory enumeration and ACL abuse via LDAP/LDAPS. Supports DCSync, RBCD, Shadow Credentials, password changes, and…

authenticationinformation-gatheringpenetration-testing+1
4041 month ago
Previous1234567Next