Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

239 results

Check-LocalAdminHash

dafthack/check-localadminhash

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine…

information-gatheringlateral-movementpassword-attacks+2

179

7 years ago

ThievingFox

slowerzs/thievingfox

Post-exploitation credential harvesting toolkit that injects into password managers and Windows utilities to capture credentials via DLL proxying,…

lateral-movementpenetration-testingpost-exploitation+1

5692 years ago

GIUDA

foxlox/giuda

Ask a TGS on behalf of another user without password

authenticationexploitationimpersonation-tools+5

4792 years ago

cve-2020-1472

shanfenglan/cve-2020-1472

Exploit for CVE-2020-1472 (Zerologon) that resets domain controller machine account password, enabling credential dumping and privilege escalation to…

exploitationlateral-movementpassword-attacks+3

26 years ago

CVE-2024-48887-FortiSwitch-Exploit

cybersecplayground/cve-2024-48887-fortiswitch-exploit

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.

exploitationlateral-movementpenetration-testing+3

21 year ago

CVE-2020-1472

b1ack0wl/cve-2020-1472

Exploit for CVE-2020-1472 (ZeroLogon) that resets the domain controller account password and enables DCSync for full domain compromise.

exploitationlateral-movementpenetration-testing+3

15 years ago

zerologon

carlos55ml/zerologon

Scripts to test and exploit the Zerologon vulnerability (CVE-2020-1472) in Active Directory, enabling password reset and hash dumping of domain…

exploitationlateral-movementpassword-attacks+3

4 years ago

Invoke-DCSync

al1ex/invoke-dcsync

Invoke-DCSync

exploitationlateral-movementpassword-attacks+3

16 years ago

SkyRAT

yschgroup/skyrat

SkyRAT - Powershell Remote Administration Tool

command-and-controldata-exfiltrationlateral-movement+5

348 years ago

Archived

BrainDamage

mehulj94/braindamage

Remote administration service which uses twitter as a command and control server

command-and-controldata-exfiltrationinformation-gathering+5

7145 years ago

Stowaway

ph4ntonn/stowaway

Multi-hop proxy tool for pentesters enabling traffic routing through multiple nodes, SOCKS5/SSH tunneling, port forwarding, remote shell, and…

command-and-controlencryption-decryption-toolslateral-movement+3

3.4k7 months ago

SCShell

mr-un1k0d3r/scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

exploitationlateral-movementpenetration-testing+2

1.7k3 years ago

SharpSCCM

mayyhem/sharpsccm

C# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…

authenticationlateral-movementnetwork-security+3

70627 days ago

pivotnacci

blackarrowsec/pivotnacci

A tool to make socks connections through HTTP agents

lateral-movementpenetration-testingred-teaming+1

7275 years ago

VPNPivot

0x36/vpnpivot

Explore the network using VPNPivot tool

encryption-decryption-toolslateral-movementnetwork-security+2

27710 years ago

SharpWSUS

nettitude/sharpwsus

C# tool for lateral movement through WSUS by creating, approving, and deploying malicious updates to target Windows clients in Active Directory…

lateral-movementpenetration-testingred-teaming

5074 years ago

go-secdump

jfjallid/go-secdump

Tool to remotely dump secrets from the Windows registry

authenticationencryption-decryption-toolslateral-movement+4

5343 months ago

GhostTask

netero1010/ghosttask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

lateral-movementpersistence-mechanismsprivilege-escalation+1

6431 year ago

Previous12…14 Next