Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

38 results

Archived

flare-ida

mandiant/flare-ida

IDA Pro utilities from FLARE team

binary-analysisdebuggersdynamic-analysis-sandboxing+3

2.5k

1 year ago

Noriben

rurik/noriben

Python-based malware analysis sandbox that integrates with Sysinternals Procmon to automatically collect, analyze, and report runtime indicators with…

dynamic-analysis-sandboxingforensicsioc-management+1

1.3k14 days ago

pyobfuscate

machine1337/pyobfuscate

A simple and efficent script to obfuscate python payloads to make it completely FUD

exploitationmalware-analysispayload-development+2

392 years ago

GAMBA

denuvosoftwaresolutions/gamba

Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

binary-analysiscryptographymalware-analysis+2

2472 years ago

Daily-dose-of-malware

woj-ciech/daily-dose-of-malware

Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime…

command-and-controlinformation-gatheringmalware-analysis+2

408 years ago

PHP-Shell-Detector

emposha/php-shell-detector

Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature…

defensive-toolsmalware-analysisvulnerability-scanners+1

81811 years ago

antivmdetection

nsmfoo/antivmdetection

Script to create templates to use with VirtualBox to make vm detection harder

anti-botids-ips-evasionmalware-analysis

7815 years ago

detect-ransomware-filenames

corelight/detect-ransomware-filenames

Zeek script that monitors SMB traffic and alerts on known ransomware filenames using the Anti-Ransomware File System Resource Manager list.

defensive-toolsintrusion-detectionmalware-analysis+2

221 year ago

Detect-CVE-2024-0762

tadash10/detect-cve-2024-0762

Detecting vulnerabilities like CVE-2024-0762, particularly in UEFI firmware, is quite challenging due to the low-level nature

firmware-analysisincident-responsemalware-analysis+3

2 years ago

batchfuscate

hellwound/batchfuscate

A simple script to obfuscate batch(bat) code easily

malware-analysispayload-generation

43 years ago

ir-rescue

diogo-fernan/ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

digital-forensicsdisk-forensicsforensics+6

4885 years ago

frida-wshook

oalabs/frida-wshook

Script analysis tool based on Frida.re

dynamic-analysis-sandboxingmalware-analysisscripting-automation

1319 years ago

kimi

chaitanyaharitash/kimi

Script to generate malicious debian packages (debain trojans).

command-and-controlexploit-frameworksmalware-analysis+5

1247 years ago

HtmlSmuggling

de3vil/htmlsmuggling

it is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page

malware-analysispayload-generationphishing-tools+1

1203 years ago

persisthunt

raj3shp/persisthunt

Linux Persistence Detection, Hunting and Artifact Collection script

container-securitydigital-forensicsforensics+6

262 months ago

ghidra_stack_strings

zxgio/ghidra_stack_strings

A script to detect stack-strings by using emulation (leveraging Unicorn)

binary-analysisdynamic-code-analysismalware-analysis+1

3510 months ago

cpanel-cve-2026-41940

mahfuzreham/cpanel-cve-2026-41940

cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script

configuration-auditingdefensive-toolsforensics+5

23 months ago

ThePhish

emalderson/thephish

ThePhish: an automated phishing email analysis tool

digital-forensicsemail-securityincident-response+5

1.4k2 years ago

Previous 123 Next