Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
255 results
SharpChromium preview

SharpChromium

GitHubdjhohnstein/sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

data-exfiltrationinformation-gatheringpassword-cracking+2
766
5 years ago
scavenger preview

scavenger

GitHubspiderlabs/scavenger

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as…

data-exfiltrationinformation-gatheringpenetration-testing+2
3427 years ago
EvilSelenium preview

EvilSelenium

GitHubmrd0x/evilselenium

Weaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…

data-exfiltrationinformation-gatheringphishing-tools+3
6064 years ago
golddigger preview

golddigger

GitHubustayready/golddigger

Recursively searches files for sensitive information using customizable regex patterns, designed for penetration testers to rapidly discover secrets…

data-exfiltrationinformation-gatheringpenetration-testing+1
1983 years ago
EvilSlackbot preview

EvilSlackbot

GitHubdrew-sec/evilslackbot

A Slack bot phishing framework for Red Teaming exercises

data-exfiltrationinformation-gatheringpenetration-testing+4
1672 years ago
FakeDataGen preview

FakeDataGen

GitHubjoelgmsec/fakedatagen

Generates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…

data-exfiltrationinformation-gatheringosint+1
1041 year ago
sccm-http-looter preview

sccm-http-looter

GitHubbadsectorlabs/sccm-http-looter

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)

data-exfiltrationinformation-gatheringmisconfiguration+3
2161 year ago
chromecookiestealer preview

chromecookiestealer

GitHubmagisterquis/chromecookiestealer

Steal/Inject Chrome cookies over the DevTools (--remote-debugging-port) protocol.

data-exfiltrationinformation-gatheringpenetration-testing+1
1163 years ago
GDir-Thief preview

GDir-Thief

GitHubantman1p/gdir-thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

data-exfiltrationinformation-gatheringosint+1
585 years ago
LeakManager preview

LeakManager

GitHubmthbernardes/leakmanager

A tool to help you manage your leaks

data-exfiltrationinformation-gatheringosint+1
358 years ago
Hawk preview

Hawk

GitHubprodefense/hawk

Golang tool designed to exfiltrate passwords found via the sshd and su services

data-exfiltrationinformation-gatheringpassword-attacks+3
389 months ago
keebcap preview

keebcap

GitHubsynacktiv/keebcap

Win32 keylogger that supports all (non-ime using) languages correctly

data-exfiltrationinformation-gatheringpassword-attacks+2
562 years ago
Ustealer preview

Ustealer

GitHubatmoner/ustealer

Ubuntu stealer, steal ubuntu information in local pc

data-exfiltrationinformation-gatheringmalware-analysis+1
216 years ago
godehashed preview

godehashed

GitHuban00byss/godehashed

A golang tool that uses the dehashed.com API to search for compromised assets.

data-exfiltrationinformation-gatheringosint+1
105 years ago
osint-pattern-analyzer preview

osint-pattern-analyzer

GitHub0ggp4r1s/osint-pattern-analyzer

Automated OSINT tool for phone number discovery, pattern detection, and cross-platform correlation.

data-exfiltrationinformation-gatheringosint+3
84 months ago
SkyProfile preview

SkyProfile

GitHubalsatianconsulting/skyprofile

A lightweight aviation intelligence tool that queries ADSB-Exchange flight data using tail numbers or ICAO identifiers to quickly profile aircraft…

data-exfiltrationinformation-gatheringosint+3
98 months ago
CVE-2026-16540-SimplyScheduleAppointments preview

CVE-2026-16540-SimplyScheduleAppointments

GitHubhuseyn0vs/cve-2026-16540-simplyscheduleappointments

CVE-2026-16540 — Simply Schedule Appointments < 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion

data-exfiltrationinformation-gatheringmisconfiguration+3
11 month ago
CVE-2025-12585 preview

CVE-2025-12585

GitHubd0n601/cve-2025-12585

MxChat – AI Chatbot for WordPress <= 2.5.1 - Unauthenticated Information Exposure

data-exfiltrationinformation-gatheringvulnerability-analysis+1
10 months ago
Previous1…131415Next