Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

121 results

AutoIt-Obfuscator

pelock/autoit-obfuscator

Obfuscates AutoIt scripts to protect source code from analysis, reverse engineering, and decompilation using advanced obfuscation and polymorphic…

code-analysiscryptographyreverse-engineering

514 months ago

egodeath

nstarke/egodeath

A JavaScript Obfuscator based on Cryptographic Indistinguishability Obfuscation techniques

code-analysiseducationpapers-research+2

601 month ago

Archived

Codecepticon

accenture/codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

code-analysiscommand-and-controlids-ips-evasion+5

5282 years ago

covirt

dmaivel/covirt

An x86-64 code virtualizer for VM based obfuscation

binary-analysiscode-analysisdynamic-analysis-sandboxing+3

2721 year ago

JObfuscator

pelock/jobfuscator

Obfuscates Java source code to protect against reverse engineering, decompilation, and IP theft. Renames variables/methods, encrypts strings, and…

code-analysiscryptographyreverse-engineering+1

682 months ago

GoBfuscator

luftwaffe66/gobfuscator

Obfuscates Go source code via AES-256 string encryption with runtime decryption, identifier renaming, and comment removal to hinder reverse…

code-analysiscryptographydefensive-tools+5

131 year ago

javascript-obfuscator

javascript-obfuscator/javascript-obfuscator

Obfuscates JavaScript and Node.js code with variable renaming, string encryption, control flow flattening, and anti-debugging to protect source code…

code-analysiscryptographydefensive-tools+3

16.3k19 days ago

Flerken

we5ter/flerken

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

code-analysisdefensive-toolsdynamic-code-analysis+3

1637 years ago

awesome-mba

gmh5225/awesome-mba

List of mixed boolean-arithmetic resources

binary-analysiscode-analysiscurated-resources+3

42 years ago

obfuscation_analysis

mrphrazer/obfuscation_analysis

Binary Ninja plugin to analyze and simplify obfuscated code

binary-analysiscode-analysismalware-analysis+3

2585 months ago

browser-xpi-malware-scanner

ernos/browser-xpi-malware-scanner

A comprehensive browser extension (.xpi) malware scanner which checks for many common malware tricks like:, credential-stealers obfuscation tactics,…

code-analysiseducationforensics+5

85 months ago

ropfuscator

ropfuscator/ropfuscator

ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).

binary-analysiscode-analysisdefensive-tools+2

4432 years ago

WordPress_4.9.8_RCE_POC

brianwrf/wordpress_4.9.8_rce_poc

A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.

code-analysisexploitationpayload-development+3

747 years ago

firstexecution

nccgroup/firstexecution

Collection of different ways to execute code outside of the expected entry points

binary-analysiscode-analysisexploitation+2

1613 years ago

CVE-2024-37032-PoC

itzsh4dowxz/cve-2024-37032-poc

CVE-2024-37032 (Probllama) PoC for Ollama ≤0.1.33: path traversal and arbitrary file write via model digest handling, leading to automated privilege…

code-analysisexploitationpayload-development+5

83 months ago

CVE-2022-22909

0z09e/cve-2022-22909

Hotel Druid 3.0.3 Code Injection to Remote Code Execution

code-analysisexploitationpayload-development+3

53 years ago

CVE-2021-43609-POC

d5sec/cve-2021-43609-poc

Proof-of-concept exploit for CVE-2021-43609 demonstrating SQL injection to file read to remote code execution chain against Spiceworks help desk…

code-analysisexploitationpayload-development+3

52 years ago

CVE-2024-28397-command-execution-poc

ghostoverflow/cve-2024-28397-command-execution-poc

This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access…

code-analysisexploitationpayload-development+2

51 year ago

Previous12 3 4 5 6 7 Next