Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
352 results
VeilTransfer preview

VeilTransfer

GitHubinfosecn1nja/veiltransfer

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration…

data-exfiltrationnetwork-securitypenetration-testing+1
158
7 months ago
Phirautee preview

Phirautee

GitHubviralmaniar/phirautee

A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…

command-and-controldata-exfiltrationeducation+8
1226 years ago
SSH-Stealer preview

SSH-Stealer

GitHubdarkspacesecurity/ssh-stealer

Smart keylogging capability to steal SSH Credentials including password & Private Key

data-exfiltrationpassword-attackspenetration-testing+2
1541 year ago
Invoke-DNSteal preview

Invoke-DNSteal

GitHubjoelgmsec/invoke-dnsteal

DNS data exfiltrator that sends payloads over UDP/TCP with configurable query size, random delay, and random domains to evade detection during red…

data-exfiltrationdns-analysispenetration-testing+1
1123 years ago
dns-black-cat preview

dns-black-cat

GitHubzux0x3a/dns-black-cat

Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode…

command-and-controldata-exfiltrationdns-analysis+3
1123 years ago
ntfsDump preview

ntfsDump

GitHub3gstudent/ntfsdump

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

data-exfiltrationdata-recoverydigital-forensics+3
1195 years ago
SafeText preview

SafeText

GitHubdavidjacobson/safetext

Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.

data-exfiltrationdigital-forensicsforensics+1
1367 years ago
OneLogicalMyth_Shell preview

OneLogicalMyth_Shell

GitHubnccgroup/onelogicalmyth_shell

A HTA shell to assist with breakout assessments.

command-and-controldata-exfiltrationpenetration-testing+3
1114 years ago
RastLeak preview

RastLeak

GitHubn4xh4ck5/rastleak

Tool to automatic leak information using Hacking with engine searches

data-exfiltrationinformation-gatheringosint+1
918 years ago
SharpCovertTube preview

SharpCovertTube

GitHubricardojoserf/sharpcoverttube

Youtube as C2 channel - Control Windows systems uploading QR videos to Youtube

command-and-controldata-exfiltrationeducation+4
1022 years ago
zygote-injection-toolkit preview

zygote-injection-toolkit

GitHubanonymous941/zygote-injection-toolkit

A command-line utility to exploit Android Zygote injection (CVE-2024-31317)

android-securitydata-exfiltrationexploitation+5
608 months ago
SharpExchange preview

SharpExchange

GitHubceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

data-exfiltrationeducationinformation-gathering+4
1023 years ago
Wormy preview

Wormy

GitHubd4vinci/wormy

some python3 functions to add spreading features to any python backdoor

command-and-controldata-exfiltrationlateral-movement+3
559 years ago
spybrowse preview

spybrowse

GitHub1d8/spybrowse

Code developed to steal certain browser config files (history, preferences, etc)

data-exfiltrationinformation-gatheringmalware-analysis+2
636 years ago
covert-control preview

covert-control

GitHubricardojoserf/covert-control

Google Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram

command-and-controldata-exfiltrationencryption-decryption-tools+2
714 years ago
GDir-Thief preview

GDir-Thief

GitHubantman1p/gdir-thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

data-exfiltrationinformation-gatheringosint+1
584 years ago
LeakManager preview

LeakManager

GitHubmthbernardes/leakmanager

A tool to help you manage your leaks

data-exfiltrationinformation-gatheringosint+1
358 years ago
ODBParser preview

ODBParser

GitHubcitcheese/odbparser

OSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing

database-securitydata-exfiltrationinformation-gathering+2
466 years ago
Previous1…567…20Next