Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
692 results
loboguara preview

loboguara

GitHubolivsec/loboguara

Cyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…

data-exfiltrationdns-subdomain-enumerationinformation-gathering+6
73
1 year ago
EvilSlackbot preview

EvilSlackbot

GitHubdrew-sec/evilslackbot

A Slack bot phishing framework for Red Teaming exercises

data-exfiltrationinformation-gatheringpenetration-testing+4
1672 years ago
SharePointDumper preview

SharePointDumper

GitHubzh54321/sharepointdumper

PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…

authenticationcloud-securitydata-exfiltration+7
1918 months ago
nuguard preview

nuguard

GitHubnuguardai/nuguard

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

ai-securityapi-security-testingcode-analysis+8
5016h 19m ago
HingeSDK preview

HingeSDK

GitHubreedgraff/hingesdk

Hinge Dating App SDK for python for lonely bored SWEs

crawlerdata-exfiltrationinformation-gathering+4
11910 months ago
SilentNimvest preview

SilentNimvest

GitHubfrkngksl/silentnimvest

Nim implementation for sud0Ru's Credential Dumping from SAM/SECURITY Hives Method (a.k.a. SilentHarvest)

data-exfiltrationlateral-movementpassword-cracking+3
1075 months ago
SafeText preview

SafeText

GitHubdavidjacobson/safetext

Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.

data-exfiltrationdigital-forensicsforensics+1
1357 years ago
XBadManners preview

XBadManners

GitHubttffdd/xbadmanners

Tool for CVE-2018-16323

data-exfiltrationexploitationmemory-forensics+2
837 years ago
Log4jCenter preview

Log4jCenter

GitHubpuzzlepeaches/log4jcenter

Exploiting CVE-2021-44228 in vCenter for remote code execution and more.

command-and-controldata-exfiltrationexploitation+3
1034 years ago
memscan preview

memscan

GitHubnccgroup/memscan

Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a Windows process's memory space

data-exfiltrationfuzzinginformation-gathering+5
1285 years ago
jdvrif preview

jdvrif

GitHubcleasbycode/jdvrif

Steganography Tool for JPG Images

cryptographydata-exfiltrationencryption-decryption-tools+3
721 day ago
dnschef-ng preview

dnschef-ng

GitHubbyt3bl33d3r/dnschef-ng

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

data-exfiltrationdns-analysisinformation-gathering+4
1752 years ago
Invoke-Transfer preview

Invoke-Transfer

GitHubjoelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…

data-exfiltrationosintpenetration-testing+2
739 months ago
exfilkit preview

exfilkit

GitHubtasooshi/exfilkit

Data exfiltration utility for testing detection capabilities

data-exfiltrationdns-analysisnetwork-security+2
564 years ago
plague preview

plague

GitHubconnectedlucy/plague

Default Detections for EDR

anomaly-detectionconfiguration-auditingcurated-resources+4
962 years ago
NtDumpBOF preview

NtDumpBOF

GitHubdeh00ni/ntdumpbof

Cobalt Strike BOF that creates an LSASS minidump in memory and exfiltrates it over the C2 callback for offline credential parsing with Mimikatz or…

data-exfiltrationpost-exploitationred-teaming
992 years ago
Veritensor preview

Veritensor

GitHubarsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

ai-securitycode-analysisdata-exfiltration+8
871 month ago
GarbageMan preview

GarbageMan

GitHubwithsecurelabs/garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

binary-analysisdata-exfiltrationdigital-forensics+3
1213 years ago
Previous1…567…39Next