Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
216 results
PenetrationTesting_Notes- preview

PenetrationTesting_Notes-

GitHub0xdigimon/penetrationtesting_notes-

My Notes about Penetration Testing

curated-resourceseducationexploitation+6
740
3 months ago
WMImplant preview

WMImplant

GitHubredsiege/wmimplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is…

command-and-controlinformation-gatheringlateral-movement+3
8667 years ago
SharpWMI preview

SharpWMI

GitHubghostpack/sharpwmi

SharpWMI is a C# implementation of various WMI functionality.

command-and-controlinformation-gatheringlateral-movement+5
7665 years ago
LSTAR preview

LSTAR

GitHublintstar/lstar

LSTAR - CobaltStrike 综合后渗透插件

command-and-controlexploitationinformation-gathering+7
1.3k4 years ago
wmiexec-Pro preview

wmiexec-Pro

GitHubxiaolichan/wmiexec-pro

New generation of wmiexec.py

information-gatheringlateral-movementpenetration-testing+5
1.3k6 months ago
CredCrack preview

CredCrack

GitHubjobroche/credcrack

A fast and stealthy credential harvester

information-gatheringlateral-movementpenetration-testing+1
6263 years ago
SharpMapExec preview

SharpMapExec

GitHubcube0x0/sharpmapexec

Windows-native penetration testing swiss army knife for lateral movement, credential access, data exfiltration, and vulnerability scanning across…

authenticationdata-exfiltrationexploitation+9
6664 years ago
MSSqlPwner preview

MSSqlPwner

GitHubscorpioneslabs/mssqlpwner

Advanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…

authenticationdatabase-securityexploitation+5
4702 days ago
RedRabbit preview

RedRabbit

GitHubsecurethelogs/redrabbit

Red Team PowerShell Script

information-gatheringlateral-movementpenetration-testing+4
3373 years ago
WHP preview

WHP

GitHub51x/whp

Micro$oft Windows Hacking Pack

exploitationlateral-movementpassword-cracking+5
5258 years ago
nccfsas preview

nccfsas

GitHubnccgroup/nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

command-and-controlexploitationinformation-gathering+8
6084 years ago
BloodBash preview

BloodBash

GitHubsquidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

cloud-securityconfiguration-auditingidentity-access-management+6
4954 days ago
adaudit preview

adaudit

GitHubphillips321/adaudit

Powershell script to do domain auditing automation

configuration-auditinginformation-gatheringlateral-movement+3
4147 months ago
revsh preview

revsh

GitHubemptymonkey/revsh

A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.

command-and-controlencryption-decryption-toolsids-ips-evasion+6
4706 years ago
PowerShell-Red-Team preview

PowerShell-Red-Team

GitHubtobor88/powershell-red-team

Collection of PowerShell functions a Red Teamer may use in an engagement

information-gatheringlateral-movementpassword-attacks+3
5512 years ago
spraykatz preview

spraykatz

GitHubaas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

information-gatheringlateral-movementpenetration-testing+1
7836 years ago
CredNinja preview

CredNinja

GitHubraikia/credninja

A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus…

information-gatheringlateral-movementpenetration-testing
4497 years ago
SharpADWS preview

SharpADWS

GitHubwh0amitz/sharpadws

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

authenticationexploitationlateral-movement+6
6052 years ago
Previous1…345…12Next