Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Password Attacks — Tools | Kitploit

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
546 results
mqattack preview

mqattack

GitHubaffolter-engineering/mqattack

Rust CLI for MQTT penetration testing: subscribe/publish, broker fingerprinting, ACL probing, topic enumeration, credential brute-force, and Last…

reconnaissanceiot-securitypassword-attacks+7
1
7 days ago
Active-Directory-Health-Check preview

Active-Directory-Health-Check

GitLabroccoammon/active-directory-health-check

PowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…

defensive-toolsprivilege-escalationidentity-management+6
4 days ago
PocketPentester preview

PocketPentester

GitHubtegal1337/pocketpentester

Offline-first Android offensive security toolkit with 21 modules for recon, port scanning, subdomain enumeration, SQLi/XSS/JWT exploitation, payload…

reconnaissancevulnerability-scannerspassword-attacks+9
81 month ago
ldapin preview

ldapin

GitHubaffolter-engineering/ldapin

CLI tool to perform basic LDAP task for security assessments

reconnaissancepassword-attacksvulnerability-analysis+3
17 days ago
Overthrone preview

Overthrone

GitHubkarmanya03/overthrone

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

penetration-testing-frameworksprivilege-escalationexploit-frameworks+8
3026 days ago
EBurst preview

EBurst

GitHubgrayddq/eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。

vulnerability-scannerspassword-attacksinformation-gathering+4
3453 years ago
Get-NetNTLM preview

Get-NetNTLM

GitHubelnerd/get-netntlm

Powershell module to get the NetNTLMv2 hash of the current user

password-attackshash-analysisinformation-gathering+4
974 years ago
RandomTSScripts preview

RandomTSScripts

GitHubxpn/randomtsscripts

Collection of RedTeam engagement scripts including Pre2K default credential checks via TGS, LAPSv2 password decryption, and IIS App Pool credential…

password-attacksexploitationscripting-automation+4
2132 years ago
joomla-bruteforce preview

joomla-bruteforce

GitHubajnik/joomla-bruteforce

Python script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.

password-crackingpassword-attacksweb-application-exploitation+4
1392 years ago
GoFileX preview

GoFileX

GitHubabraxas/gofilex

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

password-crackingpassword-attacksscripting-automation+5
11 days ago
Corporate_Masks preview

Corporate_Masks

GitHubgolem445/corporate_masks

8-14 character Hashcat masks based on analysis of 3.2 million NTLM hashes cracked while pentesting

password-crackingpassword-attackshash-analysis+3
2052 months ago
OMEN preview

OMEN

GitHubrub-syssec/omen

Markov model-based password guesser in C that enumerates candidates by probability, generating most likely passwords first for hash cracking via…

password-crackingpassword-attackshash-analysis+3
3357 years ago
evil-winrm-py preview

evil-winrm-py

GitHubadityatelange/evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

password-attackslateral-movementscripting-automation+7
4087 days ago
Xenon preview

Xenon

GitHubmythicagents/xenon

A Mythic agent for Windows written in C

defensive-toolspenetration-testing-frameworksprivilege-escalation+9
1881 month ago
HashcatRosetta preview

HashcatRosetta

GitHubbandrel/hashcatrosetta

Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax

password-crackingpassword-attackshash-analysis+4
1319 days ago
EmbedXPL-Forge preview

EmbedXPL-Forge

GitHubmrhenrike/embedxpl-forge

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…

embedded-systems-securitypenetration-testing-frameworksvulnerability-scanners+9
531 day ago
WordList preview

WordList

GitHubrix4uni/wordlist

Curated collection of custom wordlists for fuzzing, DNS enumeration, parameter discovery, and default credentials, plus a Go generator for nuclei…

osintreconnaissancevulnerability-scanners+6
1543 days ago
azure-pentesting-suite preview

azure-pentesting-suite

GitHubhac01/azure-pentesting-suite

Go toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…

privilege-escalationreconnaissancepassword-attacks+9
9129 days ago
Previous12…31Next