Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
40 results
jmxbf preview

jmxbf

GitHubnccgroup/jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

authenticationpassword-attackspenetration-testing
359 years ago
even-you-brutus preview

even-you-brutus

GitHubj-baines/even-you-brutus

Dictionary Brute Force of the Mikrotik RouterOS 6.x Web Interface

authenticationembedded-systems-securityexploitation+5
93 years ago
brutus preview

brutus

GitHubpraetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

authenticationexploitationinformation-gathering+7
3274 days ago
SSOh-No preview

SSOh-No

GitHuboptionalctf/ssoh-no

User enumeration and password spraying tool for testing Azure AD

authenticationcloud-securitypassword-attacks+1
714 years ago
CredMaster preview

CredMaster

GitHubknavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

api-security-testingauthenticationcloud-security+9
1.3k1 year ago
Krb5RoastParser preview

Krb5RoastParser

GitHubjalvarezz13/krb5roastparser

KrbRoastParser is a tool for parsing Kerberos packets from pcap files to extract AS-REQ, AS-REP and TGS-REP hashes

authenticationhash-analysisnetwork-security+3
1151 month ago
f609-brute preview
Archived

f609-brute

GitHublc-at/f609-brute

Simple brute force tool for Telkom Indonesia's ZTE F609 routers

authenticationinformation-gatheringpassword-attacks+2
88 years ago
c-jwt-cracker preview

c-jwt-cracker

GitHubbrendan-rius/c-jwt-cracker

JWT brute force cracker written in C

authenticationpassword-crackingpenetration-testing+1
2.6k5 years ago
jwt-cracker preview

jwt-cracker

GitHublmammino/jwt-cracker

Simple HS256, HS384 & HS512 JWT token brute force cracker.

authenticationpassword-crackingweb-security
1.2k2 years ago
ncrack preview

ncrack

GitHubnmap/ncrack

Ncrack network authentication tool

authenticationhash-analysisnetwork-security+3
1.2k4 years ago
django-defender preview

django-defender

GitHubjazzband/django-defender

A simple super fast django reusable app that blocks people from brute forcing login attempts

authenticationdefensive-toolspassword-attacks+1
1.1k8 months ago
spraycharles preview

spraycharles

GitHubtw1sm/spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

authenticationpassword-attackspassword-cracking+2
2258 months ago
mscache preview

mscache

GitHubqax-a-team/mscache

a tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket

authenticationpassword-crackingpost-exploitation
678 years ago
FaceBrute preview

FaceBrute

GitHubemerinohdz/facebrute

Facebook brute forcer script

authenticationpassword-attackspenetration-testing+2
2814 years ago
HotelDruid-CVE-2021-42949 preview

HotelDruid-CVE-2021-42949

GitHubdhammon/hoteldruid-cve-2021-42949

Exploit for CVE-2021-42949 in HotelDruid v3.0.3, demonstrating predictable session token generation and authentication bypass via brute force.

authenticationexploitationpenetration-testing+2
4 years ago
CVE-2020-27747 preview

CVE-2020-27747

GitHubjet-pentest/cve-2020-27747

Possible Account Takeover | Brute Force Ability

authenticationexploitationpassword-attacks+2
5 years ago
bloodit preview

bloodit

GitHubbrunosergi/bloodit

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

authenticationexploitationpenetration-testing+2
5 years ago
Talon preview
Archived

Talon

GitHuboptiv/talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

authenticationpassword-attackspassword-cracking+2
4413 years ago
Previous123Next