Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

127 results

File-Injector

carlospuenteg/file-injector

File Injector is a script that allows you to store any file in an image using steganography

cryptographydata-exfiltrationencryption-decryption-tools+1

444

3 years ago

CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

p0dalirius/cve-2021-31800-impacket-smb-server-arbitrary-file-read-write

A path traversal in smbserver.py allows an attacker to read/write arbitrary files on the server.

data-exfiltrationexploitationpenetration-testing+2

113 years ago

ntfsDump

3gstudent/ntfsdump

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

data-exfiltrationdata-recoverydigital-forensics+3

1175 years ago

transfer.sh

dutchcoders/transfer.sh

Easy and fast file sharing from the command-line.

data-exfiltrationencryption-decryption-toolsgeneral-purpose-utilities

15.9k5 days ago

pyWhat

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

data-exfiltrationeducationforensics+7

7.3k1 day ago

git-crypt

agwa/git-crypt

Transparent file encryption in git

authentication-authorizationcryptographydata-exfiltration+3

9.9k8 years ago

MANSPIDER

blacklanternsecurity/manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

data-exfiltrationinformation-gatheringnetwork-security+2

1.4k8 days ago

dnscat2

iagox86/dnscat2

Encrypted command-and-control tunnel over DNS protocol. Creates stealthy C&C channels for penetration testing, with file transfer, shell access, and…

command-and-controldata-exfiltrationdns-analysis+5

4.0k4 years ago

tweetable-polyglot-png

davidbuchanan314/tweetable-polyglot-png

Pack up to 3MB of data into a tweetable PNG polyglot file.

data-exfiltrationosintsteganography

2.6k5 years ago

wave-share

ggerganov/wave-share

Serverless, peer-to-peer, local file sharing through sound

data-exfiltrationeducationutilities-frameworks+1

2.3k5 years ago

ESFileExplorerOpenPortVuln

fs0c131y/esfileexploreropenportvuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

android-securitydata-exfiltrationexploitation+5

6797 years ago

gonc

threatexpert/gonc

Netcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.

command-and-controldata-exfiltrationencryption-decryption-tools+6

7325 days ago

Grafana-CVE-2021-43798

jas502n/grafana-cve-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

data-exfiltrationexploitationinformation-gathering+3

3693 years ago

EvilSelenium

mrd0x/evilselenium

Weaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…

data-exfiltrationinformation-gatheringphishing-tools+3

6094 years ago

EmbedPayloadInPng

maldev-academy/embedpayloadinpng

Embed a payload inside a PNG file

cryptographydata-exfiltrationids-ips-evasion+2

3721 year ago

QRExfil

shell-company/qrexfil

This tool is a command line utility that allows you to convert any binary file into a QRcode movie. The data can then be reassembled visually…

data-exfiltrationred-teaming

2823 years ago

secretsdump.py

fin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

data-exfiltrationpassword-attackspenetration-testing+2

2623 years ago

PixelCode-Attack

s3n4t0r-0x0/pixelcode-attack

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

command-and-controldata-exfiltrationeducation+8

1748 months ago

Previous12…8 Next