Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
106 results
CVE-2026-55040 preview

CVE-2026-55040

GitHubsfewer-r7/cve-2026-55040

Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…

authentication-authorizationexploitationimpersonation-tools+4
56
15 days ago
nexphisher preview
Archived

nexphisher

GitHubhtr-tech/nexphisher

Automated phishing toolkit with pre-built login page templates and multiple port forwarding options (Ngrok, Serveo) for credential harvesting and…

impersonation-toolsinformation-gatheringosint-social-engineering+3
3.9k3 years ago
zphisher preview

zphisher

GitHubhtr-tech/zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this…

educationimpersonation-toolsphishing+2
16.7k2 years ago
BITB preview

BITB

GitHubmrd0x/bitb

HTML/CSS/JS templates for Browser-In-The-Browser phishing attacks, embedding fake login windows with customizable titles, domains, and phishing links…

impersonation-toolsphishingphishing-tools+2
2.9k4 years ago
CredSniper preview

CredSniper

GitHubustayready/credsniper

Phishing framework with Flask backend that clones login pages and captures credentials along with 2FA tokens, featuring SSL support and an API for…

authenticationimpersonation-toolsphishing+3
1.4k6 years ago
DroppedConnection preview

DroppedConnection

GitHubnccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

impersonation-toolspenetration-testingphishing-tools+2
1293 years ago
NegoExRelay preview

NegoExRelay

GitHubmorrubin/negoexrelay

Relays NegoEx/PKU2U Kerberos authentication to arbitrary targets, enabling credentialless authentication, command execution, SMB hash dumping, and…

authenticationexploitationimpersonation-tools+4
914 years ago
SocialEngineering preview

SocialEngineering

GitHubcappricio-securities/socialengineering

Automated social engineering toolkit for phishing credential capture, email spoofing, and OTP/SMS flooding attacks. Designed for penetration testing…

impersonation-toolspassword-attacksphishing-tools+2
15 months ago
Deep-Live-Cam preview

Deep-Live-Cam

GitHubhacksider/deep-live-cam

real time face swap and one-click video deepfake with only a single image

ai-securityimpersonation-toolsosint-social-engineering+2
96.1k2 days ago
evilginx2 preview

evilginx2

GitHubkgretzky/evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

impersonation-toolspenetration-testingphishing+4
15.5k2 months ago
wifiphisher preview

wifiphisher

GitHubwifiphisher/wifiphisher

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

impersonation-toolsmalware-analysisphishing+6
14.8k3 months ago
king-phisher preview

king-phisher

GitHubcrimsonforge-io/king-phisher

Simulate realistic phishing campaigns with credential harvesting, email tracking, and landing page cloning for security awareness training and…

email-securityimpersonation-toolspenetration-testing+4
2.6k3 months ago
SMSBotBypass preview

SMSBotBypass

GitHubguallagang508/smsbotbypass

Automated social-engineering bot that uses Twilio and Discord to call targets, impersonate brands, and capture SMS verification codes to bypass OTP…

authenticationimpersonation-toolsphishing-tools+1
5052 years ago
StopDefender preview

StopDefender

GitHublab52io/stopdefender

Disables Windows Defender by creating a token with TrustedInstaller and Windefend service accounts; designed for one-click use in post-exploitation…

adversarial-attackimpersonation-toolspost-exploitation+2
9853 years ago
otp-bot preview

otp-bot

GitHuboriyomi12/otp-bot

Automates vishing calls via Discord bot and API to intercept SMS one-time passwords, bypassing SMS verification for PayPal, Google, Instagram, and 3D…

authenticationimpersonation-toolspenetration-testing+3
3772 years ago
PowershellKerberos preview

PowershellKerberos

GitHubmzhmo/powershellkerberos

PowerShell scripts to dump Kerberos tickets from LSA cache and inject stolen .kirbi or base64 tickets to impersonate users and move laterally across…

authenticationimpersonation-toolslateral-movement+3
3674 months ago
squarephish preview

squarephish

GitHubsecureworks/squarephish

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

authenticationimpersonation-toolsphishing+3
3463 years ago
impersonate preview

impersonate

GitHubsensepost/impersonate

Windows token impersonation tool to list tokens, execute commands as impersonated users, and add domain admin users during Active Directory pentests.

adversarial-attackimpersonation-toolslateral-movement+3
3293 years ago
Previous123456Next