Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
553 results
tgsherlock preview

tgsherlock

GitHubemrekybs/tgsherlock

Telegram OSINT tool for user, group and message investigation

data-exfiltrationinformation-gatheringlog-analysis+6
0 days ago
begal-c2 preview

begal-c2

GitHubxsanflip/begal-c2

Flask and Socket.IO command-and-control panel with a rogue browser extension agent that harvests credentials, exfiltrates files via Telegram, and…

command-and-controldata-exfiltrationeducation+6
84 months ago
OLMo-Twin preview

OLMo-Twin

GitHubali-bana/olmo-twin

Reproduction code for a controlled study of membership-inference attacks on OLMo 2, covering document insertion, mid-training, post-training, scoring…

ai-securitydata-exfiltrationmachine-learning+2
5 days ago
PrivacyTrace preview

PrivacyTrace

GitHubai45lab/privacytrace

How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces

ai-securitydata-exfiltrationinformation-gathering+3
11 day ago
Lab-RATS-v1.6 preview

Lab-RATS-v1.6

GitHubk4n3co/lab-rats-v1.6

Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction…

android-securitycommand-and-controldata-exfiltration+8
804 days ago
NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2- preview

NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2-

GitHubkaandemir993/nwh-stealer-analysis-fileless-bun-runtime-execution-clipboard-image-theft-cloud-c2-aws-r2-

Static analysis and payload extraction of NWH Stealer. Features deep dive into fileless execution via Bun JavaScript Runtime, in-memory clipboard…

binary-analysiscommand-and-controldata-exfiltration+7
5 days ago
flipperzero preview

flipperzero

GitHubzarcolio/flipperzero

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

data-exfiltrationeducationhardware-hacking+7
5151 year ago
eBook-BypassingAVsByCSharp preview

eBook-BypassingAVsByCSharp

GitHubdamonmohammadbagher/ebook-bypassingavsbycsharp

eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

command-and-controlcurated-resourcesdata-exfiltration+8
4613 years ago
AndroRAT preview

AndroRAT

GitHubkarma9874/androrat

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

android-securitycommand-and-controldata-exfiltration+7
5.3k2 years ago
picard preview

picard

GitHubneitzert/picard

Protocol-Introspecting Chunk Adapter for Resilient Data

bluetooth-securitycryptographydata-exfiltration+6
194 days ago
ln-upgrade-dynamics preview

ln-upgrade-dynamics

GitHubbitcoindatalabs/ln-upgrade-dynamics

Code, aggregate data and LaTeX source for 'Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023-2026' (arXiv:2610.30350)

data-exfiltrationeducationnetwork-security+4
10 days ago
ConfluenceC2 preview

ConfluenceC2

GitHubdagowda/confluencec2

This is a project aimed to make every other Saas product a C2, confluence is just the beginning.

command-and-controldata-exfiltrationlateral-movement+9
2313 days ago
Memory-injection preview

Memory-injection

GitHubpedrobarcha/memory-injection

Research on persistent prompt injections via memory features in Claude, Gemini, and ChatGPT, with reproduction steps, datasets, and proofs for…

adversarial-attackai-securitydata-exfiltration+2
24 months ago
Black_Hole_Attack_for_Vector_Database preview

Black_Hole_Attack_for_Vector_Database

GitHubhanxi19/black_hole_attack_for_vector_database

Research implementation of the Black-Hole Attack that poisons vector database indexes via centrality-driven hubness, with FAISS pipelines and…

adversarial-attackai-securitydata-exfiltration+4
44 months ago
CVE-2025-49132 preview

CVE-2025-49132

GitHub2t8a/cve-2025-49132

Python scanner for CVE-2025-49132 that exploits a path traversal in Pterodactyl Panel's locale endpoint to extract exposed database configuration…

data-exfiltrationexploitationinformation-gathering+5
1 year ago
3snake preview

3snake

GitHubblendin/3snake

Tool for extracting information from newly spawned processes

data-exfiltrationmemory-forensicspassword-attacks+4
7911 year ago
jellyfin-playlist-itemids preview

jellyfin-playlist-itemids

GitHubabraxas/jellyfin-playlist-itemids

Jellyfin Server 12.2 - High - Remote - IDOR - public playlist ItemIds leftover of GHSA-9x85 then unauth stream

api-securitydata-exfiltrationinformation-gathering+5
17 days ago
CVE-2026-78164 preview

CVE-2026-78164

GitHuboscerd/cve-2026-78164

Runnable proof-of-concept for CVE-2026-78164, demonstrating secret leakage when Apache Camel HTTP producers resolve property placeholders in…

data-exfiltrationdefensive-toolseducation+4
18 days ago
Previous12…31Next