Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
pacu preview

pacu

GitHubrhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-infrastructure-securitycloud-securitydata-exfiltration+7
5.3k
5 months ago
google_socks preview
Archived

google_socks

GitHublukebaggett/google_socks

A proof of concept demonstrating the use of Google Drive for command and control.

cloud-securitycommand-and-controldata-exfiltration+3
888 years ago
CVE-2022-3656 preview

CVE-2022-3656

GitHubmomika233/cve-2022-3656
data-exfiltrationexploitationvulnerability-analysis+1
383 years ago
GC2-sheet preview

GC2-sheet

GitHubloociprian/gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint…

command-and-controldata-exfiltrationmalware-analysis+2
6512 months ago
GDir-Thief preview

GDir-Thief

GitHubantman1p/gdir-thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

data-exfiltrationinformation-gatheringosint+1
584 years ago
SharpChromium preview

SharpChromium

GitHubdjhohnstein/sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

data-exfiltrationinformation-gatheringpassword-cracking+2
7665 years ago
RastLeak preview

RastLeak

GitHubn4xh4ck5/rastleak

Tool to automatic leak information using Hacking with engine searches

data-exfiltrationinformation-gatheringosint+1
918 years ago
aws_pwn preview

aws_pwn

GitHubdagrz/aws_pwn

A collection of AWS penetration testing junk

cloud-infrastructure-securitycloud-securitydata-exfiltration+6
1.2k8 years ago
GTRS preview

GTRS

GitHubmthbernardes/gtrs

GTRS - Google Translator Reverse Shell

command-and-controldata-exfiltrationids-ips-evasion+2
6241 year ago
CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera preview

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

GitHubpuliczek/cve-2022-0337-poc-google-chrome-microsoft-edge-opera

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak -…

data-exfiltrationeducationexploitation+2
3414 years ago
Chrome-Extractor preview

Chrome-Extractor

GitHubd4vinci/chrome-extractor

Python script that will extract all saved passwords from your google chrome database on windows only

data-exfiltrationdigital-forensicsforensics+2
8610 years ago
covert-control preview

covert-control

GitHubricardojoserf/covert-control

Google Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram

command-and-controldata-exfiltrationencryption-decryption-tools+2
714 years ago
informer preview

informer

GitHubpaulpierre/informer

A Telegram Mass Surveillance Bot in Python

crawlerdata-exfiltrationimpersonation-tools+3
1.7k10 months ago
ESFileExplorerOpenPortVuln preview

ESFileExplorerOpenPortVuln

GitHubfs0c131y/esfileexploreropenportvuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

android-securitydata-exfiltrationexploitation+5
6787 years ago
Xenotix-Python-Keylogger preview

Xenotix-Python-Keylogger

GitHubajinabraham/xenotix-python-keylogger

Xenotix Python Keylogger for Windows.

data-exfiltrationpassword-attackspayload-development+3
4627 years ago
dark-doh preview

dark-doh

GitHubdarksh3llru/dark-doh
command-and-controldata-exfiltrationred-teaming
192 years ago
CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp preview

CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

GitHubgeorge0papasotiriou/cve-2026-21002-serverless-cold-start-credential-leakage-via-reused-tmp
cloud-infrastructure-securitycloud-securitydata-exfiltration+4
21 days ago