Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

706 results

SSH-User-Enum-Python3-CVE-2018-15473

sergiovks/ssh-user-enum-python3-cve-2018-15473

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3…

authenticationexploitationinformation-gathering+3

3 years ago

CVE-2023-26984

bypazs/cve-2023-26984

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted…

authenticationpenetration-testingprivilege-escalation+2

3 years ago

some-tweak-to-hide-jwt-payload-values

password123456/some-tweak-to-hide-jwt-payload-values

Lightweight Python library for obfuscating JWT payload values using XOR encryption with timestamp-based keys, preventing plaintext decoding of…

api-securityauthenticationeducation+1

102 years ago

poc-cribl-rce

livehybrid/poc-cribl-rce

CVE-2019-11076 - Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request

authenticationcommand-and-controlexploitation+3

87 years ago

defender

0warn/defender

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

anomaly-detectionauthenticationconfiguration-auditing+6

5 months ago

Openbsd-Privilege-Escalation

retrymp3/openbsd-privilege-escalation

Script that automates the process of escalating privileges on openbsd system (CVE-2019-19520) by exploiting the xlock binary and againing it's sgid…

authenticationexploitationpenetration-testing+2

21 year ago

fortios-ldap-mitm-poc-CVE-2019-5591

ayewo/fortios-ldap-mitm-poc-cve-2019-5591

The default configuration of LDAP on FortiOS v6.0.x to v6.2.0 does not check server identity for LDAP/S leading to MITM attacks. This PoC demos full…

authenticationexploitationinformation-gathering+3

111 months ago

ADCollector

dev-2null/adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

authenticationconfiguration-auditinginformation-gathering+4

63711 months ago

getSPNless

jarnovandenbrink/getspnless

Python tool to automatically perform SPN-less RBCD attacks.

authenticationexploitationlateral-movement+3

1328 months ago

CVE-2024-20674

gpotter2/cve-2024-20674

Exploit for CVE-2024-20674: Kerberos mutual authentication bypass via logic bug in client-side U2U TGT-REP handling. Enables unauthenticated network…

authenticationexploitationnetwork-security+2

11 year ago

CVE-2018-15473

sait-nuri/cve-2018-15473

OpenSSH 2.3 < 7.7 - Username Enumeration

authenticationexploitationinformation-gathering+3

425 years ago

CVE-2021-29441

bysinks/cve-2021-29441

Exploit for CVE-2021-29441 in Alibaba Nacos, enabling unauthorized addition of user accounts by sending crafted requests to the target IP.

authenticationexploitationpenetration-testing+2

24 years ago

Whisker

eladshamir/whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively…

authenticationexploitationpenetration-testing+4

9571 year ago

CVE-2023-33243

redteampentesting/cve-2023-33243

PoC for login with password hash in STARFACE

authenticationexploitationpassword-attacks+3

13 years ago

cups-script-final-project

aniruddh-bhandarkar/cups-script-final-project

Custom script to showcase the novel contribution to CVE-2025-58060

authenticationnetwork-securitypenetration-testing+3

5 months ago

JWTweak

rishuranjanofficial/jwtweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

authenticationcryptographypayload-generation+3

1032 months ago

lsarelayx

ccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

authenticationexploitationpassword-attacks+2

5874 years ago

dumpguard_bof

0xedh/dumpguard_bof

Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.

authenticationexploitationpassword-attacks+3

2248 months ago

Previous 1…345…40 Next