Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
736 results
DoH_c2_Trigger preview

DoH_c2_Trigger

GitHuboutflanknl/doh_c2_trigger

Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/

command-and-controldns-analysisnetwork-security+1
53
7 years ago
BPFDoor-controller-source preview

BPFDoor-controller-source

GitHubhaxrob/bpfdoor-controller-source
command-and-controlexploitationmalware-analysis+4
154 months ago
CVE-2024-3400 preview

CVE-2024-3400

GitHubadanikamal/cve-2024-3400

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

command-and-controlexploitationnetwork-security+3
81 year ago
sdwan-cve-2021-1480 preview

sdwan-cve-2021-1480

GitHubxmco/sdwan-cve-2021-1480

PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN.

command-and-controlexploitationnetwork-security+3
45 years ago
CVE-2025-32433_Erlang-OTP_PoC preview

CVE-2025-32433_Erlang-OTP_PoC

GitHubabrewer251/cve-2025-32433_erlang-otp_poc

This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers

command-and-controlexploitationnetwork-security+3
11 year ago
Blackash-CVE-2025-14558 preview

Blackash-CVE-2025-14558

GitHubrockmelodies/blackash-cve-2025-14558

CVE-2025-14558

command-and-controlexploitationnetwork-security+3
8 months ago
CVE-2025-32433_PoC preview

CVE-2025-32433_PoC

GitHubodst-forge/cve-2025-32433_poc

This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers

command-and-controlexploitationnetwork-security+3
1 year ago
flightsim preview

flightsim

GitHubalphasoc/flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

command-and-controldefensive-toolsdns-analysis+4
1.4k2 years ago
BruteRatel-DetectionTools preview

BruteRatel-DetectionTools

GitHubimmersive-labs-sec/bruteratel-detectiontools

A collection of Tools and Rules for decoding Brute Ratel C4 badgers

command-and-controldefensive-toolsincident-response+3
674 years ago
C2-detection-manjusaka preview

C2-detection-manjusaka

GitHubcorelight/c2-detection-manjusaka

Detection of Manjusaka C2 framework

command-and-controlincident-responseintrusion-detection+3
62 years ago
zeek-asyncrat-detector preview

zeek-asyncrat-detector

GitHubcorelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

anomaly-detectioncommand-and-controlintrusion-detection+3
310 months ago
zeek-netsupport-detector preview

zeek-netsupport-detector

GitHubcorelight/zeek-netsupport-detector

A Zeek based NetSupport detector. NetSupport is often abused by attackers in malware.

command-and-controldefensive-toolsintrusion-detection+3
210 months ago
Empire preview

Empire

GitHubbc-security/empire

Encrypted C2 and post-exploitation framework for red teams, with modular PowerShell/Python/C#/Go agents, many offensive modules, and easy…

adversarial-attackcommand-and-controlids-ips-evasion+5
5.3k19 days ago
skyjack preview

skyjack

GitHubsamyk/skyjack

A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying…

command-and-controlexploitationhardware-iot-security+5
1.8k8 years ago
r77-rootkit preview

r77-rootkit

GitHubbytecode77/r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

command-and-controldefensive-toolsids-ips-evasion+6
2.2k1 month ago
emp3r0r preview

emp3r0r

GitHubjm33-m0/emp3r0r

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

anti-botcommand-and-controlids-ips-evasion+8
1.7k4 days ago
pwncat preview

pwncat

GitHubcytopia/pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…

command-and-controlids-ips-evasionlateral-movement+7
2.0k4 years ago
RedGuard preview

RedGuard

GitHubwikiz/redguard

C2 front flow control tool with JA3/JARM fingerprint randomization, domain fronting, malleable C2 profile validation, and IP whitelisting to evade…

command-and-controlids-ips-evasionred-teaming
1.6k2 years ago
Previous123…41Next