Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

600 results

vmware_vcenter_cve_2020_3952

guardicore/vmware_vcenter_cve_2020_3952

Exploit for CVE-2020-3952 in vCenter 6.7

authentication-authorizationexploitationpenetration-testing+3

274

6 years ago

VMInjector

hzphreak/vminjector

DLL Injection tool to unlock guest VMs

authentication-authorizationbinary-exploitationexploitation+4

23813 years ago

DahuaConsole

mcw0/dahuaconsole

Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.

authentication-authorizationembedded-systems-securityexploitation+5

3181 year ago

agentsh

canyonroad/agentsh

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

ai-securityauthentication-authorizationcloud-security+7

38126 days ago

kontext-cli

kontext-security/kontext-cli

Secure agents in seconds with permissions enforced at runtime.

ai-securityauthentication-authorizationcloud-security+3

2118 days ago

heartwood

radicle-dev/heartwood

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

authentication-authorizationcode-analysisnetwork-security+2

26318h 41m ago

smbtakeover

zyn3rgy/smbtakeover

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

authentication-authorizationlateral-movementpenetration-testing+2

3611 year ago

aad-sso-enum-brute-spray

treebuilder/aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

authentication-authorizationcloud-securityinformation-gathering+3

1934 years ago

MagicSigner

namazso/magicsigner

Signtool for expired certificates

adversarial-attackauthentication-authorizationdefensive-tools+2

5253 years ago

CVE-2018-10933

soledad208/cve-2018-10933

CVE-2018-10933 very simple POC

authentication-authorizationexploitationpayload-generation+3

1267 years ago

SCCMSecrets

synacktiv/sccmsecrets

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.

authentication-authorizationexploitationinformation-gathering+5

2762 days ago

DahuaLoginBypass

bp2008/dahualoginbypass

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

authentication-authorizationexploitationiot-security+3

1952 months ago

CVE-2024-27198-RCE

w01fh4cker/cve-2024-27198-rce

CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4

authentication-authorizationexploitationpenetration-testing+3

1542 years ago

YourMemory

sachitrafa/yourmemory

Agentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.

ai-securityauthentication-authorizationforensics+5

2651 month ago

swicc

tomasz-lisowski/swicc

A framework for creating smart cards (ICC-based cards with contacts).

authentication-authorizationembedded-systems-securityhardware-security+2

1434 months ago

ScreenConnect-AuthBypass-RCE

w01fh4cker/screenconnect-authbypass-rce

Exploit script for CVE-2024-1708 and CVE-2024-1709 in ConnectWise ScreenConnect, enabling authentication bypass and remote code execution with user…

authentication-authorizationexploitationpenetration-testing+3

1122 years ago

violin

strategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

authentication-authorizationexploitationosint+8

8313 days ago

instagram-private-bypass

jatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…

authentication-authorizationeducationinformation-gathering+3

1777 months ago

Previous 1…345…34 Next