Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
33 results
Mandiant-Azure-AD-Investigator preview
Archived

Mandiant-Azure-AD-Investigator

GitHubmandiant/mandiant-azure-ad-investigator

Read-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…

cloud-securitydigital-forensicsidentity-access-management+4
648
3 years ago
Disable-IPv6-CVE-2024-38063-Fix preview

Disable-IPv6-CVE-2024-38063-Fix

GitHubalmogopp/disable-ipv6-cve-2024-38063-fix

A PowerShell script to temporarily mitigate the CVE-2024-38063 vulnerability by disabling IPv6 on Windows systems. This workaround modifies the…

defensive-toolsgeneral-purpose-utilitiesmisconfiguration+2
2 years ago
Log4j-CVE-2021-44228-Remediation preview

Log4j-CVE-2021-44228-Remediation

GitHubdigital-dev/log4j-cve-2021-44228-remediation

This powershell script is intended to be used by anyone looking to remediate the Log4j Vulnerability within their environment. It can target multiple…

cloud-securitydefensive-toolsincident-response+3
2 years ago
EntraFalcon preview

EntraFalcon

GitHubcompasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

cloud-securityidentity-access-managementinformation-gathering+3
4945 days ago
CVE-2021-36934 preview

CVE-2021-36934

GitHubtda90/cve-2021-36934

CVE-2021-36934 PowerShell Fix

configuration-auditingmisconfigurationprivilege-escalation+2
15 years ago
CVE-2021-3438 preview

CVE-2021-3438

GitHubtobiass1402/cve-2021-3438

Detection and remediation for CVE-2021-3438 with Powershell

configuration-auditingmisconfigurationscripting-automation+2
5 years ago
ScubaGear preview

ScubaGear

GitHubcisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

cloud-securityconfiguration-auditingdefensive-tools+3
2.7k2 days ago
windows_hardening preview

windows_hardening

GitHub0x6d69636b/windows_hardening

HardeningKitty and Windows Hardening Settings

configuration-auditingdefensive-toolsmisconfiguration
2.7k3 days ago
HardeningKitty preview

HardeningKitty

GitHubscipag/hardeningkitty

HardeningKitty - Checks and hardens your Windows configuration

authentication-authorizationconfiguration-auditingdefensive-tools+2
1.8k1 month ago
CVE-2022-41040_Mitigation preview

CVE-2022-41040_Mitigation

GitHubcentariscyber/cve-2022-41040_mitigation

PowerShell script to mitigate CVE-2022-41040 on affected Exchange servers by applying recommended configuration changes.

defensive-toolsexploitationmisconfiguration+2
3 years ago
CVE-2017-9798 preview
Archived

CVE-2017-9798

GitHubnitrado/cve-2017-9798

Checks a shared hosting environment for CVE-2017-9798

misconfigurationscripting-automationvulnerability-analysis+1
38 years ago
nginx-mitigate-log4shell preview

nginx-mitigate-log4shell

GitHubinfiniroot/nginx-mitigate-log4shell

Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script

defensive-toolsmisconfigurationscripting-automation+2
384 years ago
log4jjndilookupremove preview

log4jjndilookupremove

GitHublukepasek/log4jjndilookupremove

A simple script to remove Log4J JndiLookup.class from jars in a given directory, to temporarily protect from CVE-2021-45046 and CVE-2021-44228.

incident-responsemisconfigurationscripting-automation+2
4 years ago
GPOZaurr preview

GPOZaurr

GitHubevotecit/gpozaurr

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in…

configuration-auditingmisconfigurationutilities-frameworks
1.2k11 days ago
Locksmith preview

Locksmith

GitHubjakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

configuration-auditingdefensive-toolsmisconfiguration+2
1.6k29 days ago
dllspy preview

dllspy

GitHubn7on/dllspy

Discover input surfaces and security issues in compiled .NET assemblies — without running them.

api-securityauthenticationcode-analysis+5
395 months ago
CVE-2023-36884-Checker preview

CVE-2023-36884-Checker

GitHubtarraschk/cve-2023-36884-checker

Script to check for CVE-2023-36884 hardening

configuration-auditingmisconfigurationscripting-automation+1
153 years ago
Windows-Local-Privilege-Escalation-Cookbook preview

Windows-Local-Privilege-Escalation-Cookbook

GitHubnickvourd/windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

configuration-auditingeducationexploitation+9
1.4k6 months ago
Previous12Next