Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

264 results

Archived

PowerSploit

powershellmafia/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

lateral-movementpayload-generationpenetration-testing+5

13.1k

6 years ago

RedTeam-Tools

a-poc/redteam-tools

Tools and Techniques for Red Team / Penetration Testing

exploitationlateral-movementosint+7

9.7k5 months ago

Yasso

sairson/yasso

强大的内网渗透辅助工具集-让Yasso像风一样支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库…

exploitationlateral-movementpassword-attacks+5

1.6k4 years ago

WHP

51x/whp

Micro$oft Windows Hacking Pack

exploitationlateral-movementpassword-cracking+5

5268 years ago

pyGPOAbuse

hackndo/pygpoabuse

Partial python implementation of SharpGPOAbuse

exploitationlateral-movementpenetration-testing+2

5953 months ago

StandIn

fuzzysecurity/standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

dns-analysisexploitationlateral-movement+3

8754 years ago

CVE-2018-8581

wyatu/cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

email-securityexploitationlateral-movement+4

3317 years ago

DCOMUploadExec

deepinstinct/dcomuploadexec

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

exploitationlateral-movementpayload-development+3

3961 year ago

dcomhijack

wkl-sec/dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

exploitationlateral-movementpayload-development+3

3263 years ago

CVE-2019-1040

ridter/cve-2019-1040

CVE-2019-1040 with Exchange

exploitationlateral-movementpenetration-testing+2

2495 years ago

SQLRecon

xforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

database-securityexploitationlateral-movement+6

3991 year ago

clrinject

jonatan1024/clrinject

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.

exploitationlateral-movementpenetration-testing+3

2377 years ago

DLHell

synacktiv/dlhell

Local & remote Windows DLL Proxying

exploitationlateral-movementpayload-development+3

1712 years ago

acltoolkit

zblurx/acltoolkit

Active Directory ACL abuse toolkit for privilege escalation, DCSync, object ownership modification, and lateral movement via logon script…

exploitationlateral-movementpenetration-testing+2

1293 years ago

impersonate-rs

zblurx/impersonate-rs

Rusty Impersonate

exploitationimpersonation-toolslateral-movement+4

10611 months ago

scour

grines/scour

Module-based AWS exploitation framework for red team testing and blue team analysis. Emulates attack patterns in the AWS control plane with unique UA…

cloud-securityexploitationlateral-movement+4

1272 years ago

EventLogin-CVE-2025-29969

safebreach-labs/eventlogin-cve-2025-29969

Exploitation of CVE-2025-29969

exploitationlateral-movementpenetration-testing+3

687 months ago

mssql-command-tool

jas502n/mssql-command-tool

mssql 终端连接工具|命令执行

database-securityexploitationlateral-movement+3

406 years ago

Previous 1…678…15 Next