Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

25 results

Archived

SECMON

alb-uss/secmon

Automated infosec watching and vulnerability management tool with CVE polling, CPE-based matching, exploit search, RSS threat feed aggregation, and…

email-securityexploitationinformation-gathering+4

268

4 years ago

NtlmRelayToEWS

arno0x/ntlmrelaytoews

Relays NTLM authentication to Exchange Web Services for mailbox access, email sending, forwarding rule creation, and Outlook command execution via…

email-securityexploitationinformation-gathering+4

3328 years ago

crime-mapper

mr-r3b00t/crime-mapper

Browser-based OSINT mapper for cyber crime: enriches IPs, domains, and emails via Shodan, Hudson Rock, and IPInfo; analyzes email headers/time deltas…

digital-forensicsemail-securityinformation-gathering+3

2417 months ago

CVE-2021-26855-d

mr-xn/cve-2021-26855-d

Python tool to exploit CVE-2021-26855 (ProxyLogon) for downloading Exchange mailbox emails via EWS, supporting user enumeration and bulk target…

email-securityexploitationinformation-gathering+3

65 years ago

SMTPTester

xfreed0m/smtptester

small python3 tool to check common vulnerabilities in SMTP servers

email-securityinformation-gatheringpenetration-testing+1

1643 years ago

exchange-scanner

bishopfox/exchange-scanner

Identify public-facing Microsoft Exchange servers and determine their software versions

email-securityinformation-gatheringreconnaissance+3

12 months ago

ruler

sensepost/ruler

Abuse Exchange services via MAPI/HTTP or RPC/HTTP to enumerate users, create malicious mail rules, execute VBScript through Outlook forms/homepage,…

email-securityexploitationinformation-gathering+3

2.3k2 years ago

HOCig1_2

hackersonlineclub/hocig1_2

HOCig- Automatic HOC Information Gathering Tool V 1.2

dns-analysisemail-securityinformation-gathering+5

115 years ago

IP-Biter

damianofalcioni/ip-biter

Open-source tracking framework that generates configurable tracking images and links for email, web, and chat systems, with a hacker-friendly…

email-securityinformation-gatheringosint+1

3261 year ago

spfmap

bishopfox/spfmap

A program to map out SPF and DKIM records for a large number of domains

dns-analysisemail-securityinformation-gathering+2

4111 years ago

mxmap

davidhuser/mxmap

Automated pipeline that resolves Swiss municipality domains, scrapes websites for email addresses, and classifies email providers via MX, SPF, DKIM,…

dns-analysisemail-securityinformation-gathering+3

1217 days ago

Phishious

caniphish/phishious

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.

email-securityinformation-gatheringmisconfiguration+3

5183 years ago

MailRipV2

drpython3/mailripv2

Improved SMTP Checker / SMTP Cracker with proxy-support, inbox test and many more features.

email-securityinformation-gatheringpassword-attacks+1

2144 years ago

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Proof-of-concept exploit for CVE-2024-21413 (MonikerLink) enabling remote code execution and NTLM credential leakage via crafted email links,…

email-securityexploitationinformation-gathering+5

7692 years ago

smtp_userenum

h3x0v3rl0rd/smtp_userenum

Python script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.

email-harvestingemail-securityinformation-gathering+4

1 year ago

quien

retlehs/quien

A better whois and domain intelligence toolkit

dns-analysisemail-securityinformation-gathering+6

1.3k2 months ago

CVE-2021-26855-PoC

srvaccount/cve-2021-26855-poc

Go-based PoC for CVE-2021-26855 (Exchange Server SSRF) enabling unauthenticated user enumeration, mail reading, and contact extraction via crafted…

email-securityexploitationinformation-gathering+3

175 years ago

TrashEmail

rosehgal/trashemail

A hosted disposable email telegram bot; Extremely privacy friendly; Proudly hosted for community.

email-securityinformation-gatheringosint+1

5674 years ago

Previous12 Next