Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
hexalocker-analysis preview

hexalocker-analysis

GitHubsynacktiv/hexalocker-analysis

HexaLocker ransomware analysis

ioc-managementmalware-analysisthreat-intelligence
22 years ago
Malware-IOCs preview

Malware-IOCs

GitHubexecutemalware/malware-iocs

Curated collection of indicators of compromise extracted from real-world malware investigations, including hashes, domains, and IPs for threat…

curated-resourcesdigital-forensicsincident-response+3
5101 year ago
Silverseal preview

Silverseal

GitHubidov31/silverseal

Linux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…

binary-exploitationexploitationmalware-analysis+4
11810 days ago
DanderSpritz_lab preview

DanderSpritz_lab

GitHubfrancisck/danderspritz_lab

A fully functional DanderSpritz lab in 2 commands

educationexploit-frameworkslabs-practice+5
4507 years ago
nimcrypt preview

nimcrypt

GitHubicyguider/nimcrypt

PE Crypter written in Nim

binary-analysiscode-analysiseducation+9
1025 years ago
TheFatRat preview

TheFatRat

GitHubscreetsec/thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This…

educationexploit-frameworksmalware-analysis+4
11.5k4 years ago
GwisinMsi preview

GwisinMsi

GitHubchoisg/gwisinmsi

PoC MSI payload based on ASEC/AhnLab's blog post

adversarial-attackmalware-analysispayload-development+1
244 years ago
UEFI-Security-Research-Howyar-SysReturn-NetCopy preview

UEFI-Security-Research-Howyar-SysReturn-NetCopy

GitHubthemalwareguardian/uefi-security-research-howyar-sysreturn-netcopy

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…

binary-analysisembedded-systems-securityexploitation+6
29 days ago
EternalBlue-Exploit-Demonstration-MS17-010 preview

EternalBlue-Exploit-Demonstration-MS17-010

GitHubichhyak22/eternalblue-exploit-demonstration-ms17-010

Cybersecurity lab demonstrating exploitation of CVE-2017-0144 (EternalBlue) using Metasploit against a vulnerable Windows 7 VM, achieving…

command-and-controleducationexploitation+8
4 months ago
kemon preview
Archived

kemon

GitHubdidi/kemon

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

binary-analysisdefensive-toolseducation+6
3986 months ago
EQGRP_Lost_in_Translation preview

EQGRP_Lost_in_Translation

GitHubx0rz/eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

command-and-controlexploitationmalware-analysis+3
2.0k9 years ago
Furtex preview

Furtex

GitHubmatheuzsecurity/furtex

Post-exploitation and evasion research toolkit for Linux.

binary-analysiscommand-and-controlexploitation+6
2781 month ago
lupo preview

lupo

GitHubmalienist/lupo

WinDbg plugin for automated malware dynamic analysis and IOC extraction. Executes within the debugger to collect predefined indicators and writes…

debuggersdynamic-analysis-sandboxingforensics+2
1024 years ago
Indushell preview

Indushell

GitHubsecarmalabs/indushell

PoC C&C for the Industroyer malware

command-and-controlexploitationmalware-analysis+3
269 years ago
krustyloader-analysis preview

krustyloader-analysis

GitHubsynacktiv/krustyloader-analysis

KrustyLoader Analysis

curated-resourcesioc-managementmalware-analysis+2
102 years ago
YARA_for_config_extraction preview

YARA_for_config_extraction

GitHubtheatha/yara_for_config_extraction

Tutorial and source code for building a custom YARA module in C to extract malware configurations, with a practical Danabot example and reusable…

binary-analysiseducationmalware-analysis+1
82 years ago
cpanel-cve-41940-detector preview

cpanel-cve-41940-detector

GitHublimo57640-crypto/cpanel-cve-41940-detector

Read-only cPanel CVE-2026-41940 IOC detector for .sorry ransomware, Mr_Rot13 Filemanager backdoors, C2 callbacks, cron, SSH, and logs.

digital-forensicsforensicsincident-response+6
2 months ago
pridelocker-analysis preview

pridelocker-analysis

GitHubsynacktiv/pridelocker-analysis

This repository contains a IDA Python script to recover PrideLocker ESX encryptor strings and a YARA rule

binary-analysismalware-analysisreverse-engineering+2
13 years ago
Previous12Next