Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
25 results
impersonate-proxy preview

impersonate-proxy

GitHubytkoka/impersonate-proxy

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

fingerprint-spoofingimpersonation-toolspenetration-testing+3
7
2 days ago
nord-stream preview

nord-stream

GitHubsynacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

data-exfiltrationdevsecopsexploitation+5
3721 month ago
USBArmyKnife preview

USBArmyKnife

GitHubi-am-shodan/usbarmyknife

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

bluetooth-securitydata-exfiltrationhardware-hacking+8
2.8k1 month ago
Malicious-MCP preview

Malicious-MCP

GitHubquinnbast/malicious-mcp

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...

ai-securitycommand-and-controldata-exfiltration+8
84 months ago
thermoptic preview

thermoptic

GitHubmandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

anti-botcaptcha-bypasscrawler+5
1.0k4 months ago
trustme preview

trustme

GitHubmeowmycks/trustme

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

command-and-controlexploitationimpersonation-tools+4
1354 months ago
M365Pwned preview

M365Pwned

GitHubotterhacker/m365pwned

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

data-exfiltrationexploitationimpersonation-tools+5
2275 months ago
r4ven preview

r4ven

GitHubspyboy-productions/r4ven

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

educationimpersonation-toolsinformation-gathering+4
1.5k7 months ago
informer preview

informer

GitHubpaulpierre/informer

A Telegram Mass Surveillance Bot in Python

crawlerdata-exfiltrationimpersonation-tools+3
1.7k10 months ago
createdump preview

createdump

GitHubrweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

impersonation-toolspassword-attackspost-exploitation+1
1491 year ago
GlobalUnProtect preview

GlobalUnProtect

GitHubrotarydrone/globalunprotect

Decrypt GlobalProtect configuration and cookie files.

authenticationdigital-forensicsencryption-decryption-tools+5
1611 year ago
SMSBotBypass preview

SMSBotBypass

GitHubguallagang508/smsbotbypass

otp bot

authenticationimpersonation-toolsphishing-tools+1
5032 years ago
otp-bot preview

otp-bot

GitHuboriyomi12/otp-bot
authenticationimpersonation-toolspenetration-testing+3
3772 years ago
CVE-2023-4281 preview

CVE-2023-4281

GitHubb0marek/cve-2023-4281

Repository for CVE-2023-4281 vulnerability.

ids-ips-evasionimpersonation-toolsinformation-gathering+2
2 years ago
CVE-2023-4279 preview

CVE-2023-4279

GitHubb0marek/cve-2023-4279

Repository for CVE-2023-4279 vulnerability.

exploitationids-ips-evasionimpersonation-tools+3
2 years ago
BackupCreds preview

BackupCreds

GitHubleftp/backupcreds

A C# implementation of dumping credentials from Windows Credential Manager

impersonation-toolspassword-attackspenetration-testing+2
632 years ago
SpamChannel preview

SpamChannel

GitHubbyt3bl33d3r/spamchannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

email-securityimpersonation-toolsphishing-tools+1
3482 years ago
SMSOTPBOT preview

SMSOTPBOT

GitHubghost-otpbot/smsotpbot

OTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...

impersonation-toolsinformation-gatheringpenetration-testing+3
2123 years ago
Previous12Next