Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

44 results

RedTeamScripts

mr-un1k0d3r/redteamscripts

Collection of offensive red team scripts including process termination, SPF bypass for phishing, password spraying, and ColdFusion password…

email-securityexploitationpassword-attacks+4

147

5 years ago

pentestcode

s0ld13rr/pentestcode

Autonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…

ai-securitycloud-securityctf+9

51413 days ago

orpheus

trustedsec/orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

authenticationexploitationpassword-attacks+2

4191 year ago

Pwdb-Public

ignis-sec/pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

curated-resourcespassword-attackspassword-cracking

3.3k6 years ago

OffensiveLua

hackerhouse-opensource/offensivelua

Offensive Lua.

ids-ips-evasionpassword-attackspayload-development+6

2257 months ago

CVE-2023-7028

vozec/cve-2023-7028

This repository presents a proof-of-concept of CVE-2023-7028

exploitationpassword-attackspenetration-testing+3

2452 years ago

rules

ibnaleem/rules

Curated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…

curated-resourcespassword-attackspassword-cracking+2

732 months ago

NorthStarC2

eng1ndes/northstarc2

Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC…

command-and-controldata-exfiltrationinformation-gathering+6

2682 years ago

grafana-bruteforce

randomrobbiebf/grafana-bruteforce

Grafana Bruteforce tool

authenticationpassword-attackspenetration-testing+2

6 years ago

buffalo

d0n601/buffalo

A python3 multithreaded SSH dictionary attack tool

authenticationpassword-attackspenetration-testing+1

15 years ago

gMSA_Dumper

h3x0v3rl0rd/gmsa_dumper

Python utility that reads accessible gMSA password blobs from Active Directory and extracts plaintext passwords for use in security audits and red…

authenticationinformation-gatheringpassword-attacks+2

2 years ago

fluxion

jas502n/fluxion

fluxion

password-attackspenetration-testingphishing+4

8 years ago

sleepall

oditynet/sleepall

trojan CVE-2024-28085 CVE 28085

command-and-controlexploitationpassword-attacks+2

21 year ago

bifrost

its-a-feature/bifrost

Objective-C library and console to interact with Heimdal APIs for macOS Kerberos

authenticationexploitationpassword-attacks+2

1593 years ago

Hikvision-City-Hunter

voidsshadows/hikvision-city-hunter

This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading…

exploitationinformation-gatheringiot-security+5

199 months ago

wp2shell

0xwhoknows/wp2shell

Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes,…

exploitationpassword-attackspenetration-testing+4

11 month ago

CVE-2025-63353

r0otk3r/cve-2025-63353

CVE-2025-63353

exploitationpassword-attackspenetration-testing+3

21 month ago

CVE-2025-15030

nxploited/cve-2025-15030

User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

exploitationpassword-attackspenetration-testing+3

14 months ago

Previous12 3 Next