Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

415 results

ImpulsiveDLLHijack

knight0x07/impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be…

privilege-escalationpersistence-mechanismsexploitation+2

554

5 years ago

Huan

frkngksl/huan

Encrypted PE Loader Generator

encryption-decryption-toolsexploit-frameworkspayload-generation+5

5476 months ago

DDexec

arget13/ddexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

payload-generationshellcodepost-exploitation+3

8931 year ago

process_overwriting

hasherezade/process_overwriting

PE injection technique that overwrites a suspended process's executable with a payload, enabling code execution under a benign process identity.

exploitationred-teamingpayload-development+1

4721 year ago

GLUFS

diego-altf4/glufs

Automated format string vulnerability exploitation tool for discovering stack, PIE, and canary leaks with flag search capability via %s or %p…

vulnerability-analysisexploitationfuzzing+1

274 years ago

Nim-RunPE

s3cur3th1ssh1t/nim-runpe

A Nim implementation of reflective PE-Loading from memory

exploitationshellcodemalware-analysis+3

2952 years ago

FUD-UUID-Shellcode

bl4ckm1rror/fud-uuid-shellcode

C++ shellcode injection technique using XOR encryption and UUID string conversion to bypass Windows Defender, with function call obfuscation and…

defensive-toolsexploitationids-ips-evasion+6

3333 years ago

vucsa

warxim/vucsa

Deliberately vulnerable client-server application for learning penetration testing of non-HTTP thick clients. Includes challenges for SQL injection,…

vulnerability-analysisweb-application-exploitationctf+3

1013 years ago

monomorph

davidbuchanan314/monomorph

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

payload-generationexploitationhash-analysis+5

7914 years ago

gtfobins-cli

t0thkr1s/gtfobins-cli

Search for Unix binaries that can be exploited to bypass system security restrictions.

privilege-escalationinformation-gatheringpost-exploitation+2

1458 months ago

PichichiH0ll0wer

itaymigdal/pichichih0ll0wer

Nim-based process hollowing loader for PE executables with configurable injection methods, direct/indirect syscalls, anti-debug, payload encryption,…

payload-generationexploitationshellcode+3

651 year ago

RemoteTLSCallbackInjection

maldev-academy/remotetlscallbackinjection

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

shellcodeeducationbinary-exploitation+1

2912 years ago

Stardust

cracked5pider/stardust

A modern 32/64-bit position independent implant template

exploitationshellcodepost-exploitation+4

1.4k4 months ago

BrokenFlow

enkomio/brokenflow

A simple PoC to invoke an encrypted shellcode by using an hidden call

encryption-decryption-toolsexploitationids-ips-evasion+4

1153 years ago

OffensiveNim

byt3bl33d3r/offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

privilege-escalationcode-analysislateral-movement+8

3.1k2 years ago

ElfDoor-gcc

matheuzsecurity/elfdoor-gcc

LD_PRELOAD-based tool that hijacks gcc to inject malicious code into binaries during linking, enabling stealthy backdoor deployment without source…

persistence-mechanismssupply-chain-securitybinary-exploitation

1331 year ago

ProcessStomping

naksyn/processstomping

A variation of ProcessOverwriting to execute shellcode on an executable's section

shellcodepost-exploitationeducation+3

1472 years ago

ROP_ROCKET

bw3ll/rop_rocket

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack,…

penetration-testing-frameworksexploit-frameworkspayload-generation+4

17310 months ago

Previous 1…202122…24 Next