Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

481 results

PowerSploit

zerodaylab/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

penetration-testing-frameworksprivilege-escalationreconnaissance+7

239

4 years ago

physmem2profit

reverseclabs/physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

memory-forensicspassword-attacksdata-exfiltration+4

4224 years ago

Heroinn

b23r0/heroinn

A cross platform C2/post-exploitation framework.

penetration-testing-frameworkspersistence-mechanismslateral-movement+8

7127 days ago

Teamsniper

xret2pwn/teamsniper

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).

reconnaissancedata-exfiltrationinformation-gathering+2

1984 years ago

web-inf-path-trav

invicti-security/web-inf-path-trav

Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications

vulnerability-analysisexploitationweb-application-exploitation+3

333 years ago

MoreImpacketExamples

icyguider/moreimpacketexamples

More examples using the Impacket library designed for learning purposes.

lateral-movementdata-exfiltrationpost-exploitation+3

2683 years ago

KeeFarceReborn

d3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

password-attackspayload-generationdata-exfiltration+3

2993 years ago

Volumiser

ccob/volumiser

CLI and interactive console for listing, browsing, and extracting files from VM disk images (VHDX, VMDK, EBS snapshots, raw disks) for red-team…

disk-forensicsdata-exfiltrationpost-exploitation+3

4371 year ago

SharpGmailC2

reveng007/sharpgmailc2

Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

data-exfiltrationpost-exploitationcommand-and-control+2

2661 year ago

SharpExchange

ceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

phishing-toolsdata-exfiltrationinformation-gathering+4

1023 years ago

XSSFire

seifelsallamy/xssfire

A standalone Blind XSS Script.

exploitationweb-application-exploitationdata-exfiltration+3

471 year ago

secret_handshake

jconwell/secret_handshake

A prototype malware C2 channel using x509 certificates over mTLS

ids-ips-evasiondata-exfiltrationcommand-and-control+1

1532 years ago

hive

infoskirmish/hive

The CIA Hive source code as released by Wikileaks

data-exfiltrationcommand-and-controlred-teaming

1674 years ago

MemFiles

octoberfest7/memfiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

data-exfiltrationpost-exploitationcommand-and-control+1

4772 years ago

poc_salesforce_lightning

moniik/poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

exploitationweb-application-exploitationapi-security-testing+4

1845 years ago

dark-doh

darksh3llru/dark-doh

Covert file-transfer tool using DNS-over-HTTPS: encodes payload chunks in TXT records, applies XOR obfuscation, and can execute shellcode for…

data-exfiltrationcommand-and-controlred-teaming

192 years ago

plague

connectedlucy/plague

Default Detections for EDR

defensive-toolsconfiguration-auditingdata-exfiltration+4

972 years ago

NewPowerDNS

icyguider/newpowerdns

Updated version of PowerDNS by @domchell. Adds support for transfers over DNS A records and a few other useful features.

data-exfiltrationcommand-and-controlred-teaming+1

853 years ago

Previous 1…345…27 Next