Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
AutomatedLab preview

AutomatedLab

GitHubautomatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

cloud-infrastructure-securityeducationlabs-practice+1
2.2k
2 months ago
AD_Miner preview

AD_Miner

GitHubad-security/ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security…

configuration-auditingeducationinformation-gathering+6
1.6k5 months ago
dc-sonar preview

dc-sonar

GitHubst1lly/dc-sonar

Analyzing AD domains for security risks related to user accounts

educationpassword-crackingvulnerability-analysis
643 years ago
TryHackMe-CVE-2022-26923 preview

TryHackMe-CVE-2022-26923

GitHubr1skkam/tryhackme-cve-2022-26923

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

ctfeducationexploitation+2
64 years ago
CVE-2026-54121 preview

CVE-2026-54121

GitHubchpratik/cve-2026-54121

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

educationincident-responselog-analysis+4
11 month ago
CVE-2025-60654 preview

CVE-2025-60654

GitHubdotadrien/cve-2025-60654

Proof-of-concept for CVE-2025-60654: stored cross-site scripting (XSS) in Script Pag ad description field. Demonstrates filter bypass using HTML tags…

educationpapers-researchvulnerability-analysis+2
7 months ago
vulnerable-AD preview

vulnerable-AD

GitHubsafebuffer/vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

educationlabs-practicepenetration-testing
2.3k3 years ago
BadZure preview

BadZure

GitHubmvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

cloud-securityctfeducation+6
5248 days ago
agentic-threat-hunting-framework preview

agentic-threat-hunting-framework

GitHubnebulock-inc/agentic-threat-hunting-framework

ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.

ai-securityeducationincident-response+7
36816 days ago
ADLab preview

ADLab

GitHubbrowninfosecguy/adlab

Active Directory Lab for Penetration Testing

educationlabs-practicepenetration-testing
571 year ago
cve-2023-4863-analysis preview

cve-2023-4863-analysis

GitHubshcesama/cve-2023-4863-analysis

Educational analysis of CVE-2023-4863 (libwebp heap buffer overflow) with Blue Team detection tools, static WebP scanner, defensive Java validator,…

binary-analysisdefensive-toolsdynamic-analysis-sandboxing+5
23 months ago
CVE-2026-54121 preview

CVE-2026-54121

GitHub0xblackash/cve-2026-54121

CVE-2026-54121

curated-resourceseducationprivilege-escalation+1
21 month ago
CVE-2022-26923 preview

CVE-2022-26923

GitHubgh-badr/cve-2022-26923

A proof of concept exploiting CVE-2022-26923.

educationexploitationlabs-practice+2
22 years ago
CVE-2024-49019-rayng preview

CVE-2024-49019-rayng

GitHubrayngnpc/cve-2024-49019-rayng

Exploitation for CVE-2024-49019

educationexploitationlabs-practice+6
31 year ago
CVE-2022-26923 preview

CVE-2022-26923

GitHubnefhara/cve-2022-26923

Automated CVE-2022-26923 Exploitation (Certifried)

authenticationctfeducation+6
3 months ago
CVE-2022-26923 preview

CVE-2022-26923

GitHubeliasdekiniweek/cve-2022-26923

Exploitation de CVE-2022-26923

authenticationeducationexploitation+6
16 months ago
CVE-2022-26923-rayng preview

CVE-2022-26923-rayng

GitHubrayngnpc/cve-2022-26923-rayng

Exploitation for CVE-2022-26923

authenticationeducationexploitation+5
1 year ago