Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
169 results
SCOMDecrypt preview

SCOMDecrypt

GitHubnccgroup/scomdecrypt

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

encryption-decryption-toolspassword-attackspenetration-testing+2
130
2 years ago
createdump preview

createdump

GitHubrweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

impersonation-toolspassword-attackspost-exploitation+1
1491 year ago
KerberosRun preview

KerberosRun

GitHubdev-2null/kerberosrun

A little tool to play with Kerberos.

authenticationexploitationpassword-attacks+5
663 years ago
Cisco-SNMP-Slap preview

Cisco-SNMP-Slap

GitHubnccgroup/cisco-snmp-slap

IP spoofing and SNMP community string brute-forcing tool to bypass ACLs on Cisco IOS devices, exfiltrate configuration files via TFTP.

exploitationinformation-gatheringnetwork-security+4
5911 years ago
unshackle preview
Archived

unshackle

GitHubfadi002/unshackle

Open-source tool to bypass windows and linux passwords from bootable usb

authentication-authorizationeducationpassword-attacks+3
2.0k2 years ago
mimipenguin preview

mimipenguin

GitHubhuntergregal/mimipenguin

A tool to dump the login password from the current linux user

password-attackspenetration-testingpost-exploitation
4.2k0 years ago
kerbrute preview

kerbrute

GitHubropnop/kerbrute

A tool to perform Kerberos pre-auth bruteforcing

authenticationinformation-gatheringlateral-movement+3
3.4k5 years ago
RDPassSpray preview

RDPassSpray

GitHubxfreed0m/rdpassspray

Python3 tool to perform password spraying using RDP

authenticationpassword-attackspenetration-testing+1
6733 years ago
SauronEye preview

SauronEye

GitHubvivami/sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

information-gatheringosintpassword-attacks+2
7663 months ago
kaboom preview

kaboom

GitHubleviathan36/kaboom

A tool to automate penetration tests

exploit-frameworksinformation-gatheringpassword-attacks+4
3825 years ago
shard preview

shard

GitHubphilwantsfish/shard

A command line tool to detect shared passwords

information-gatheringosintpassword-attacks
4059 years ago
SharpCookieMonster preview

SharpCookieMonster

GitHubriskydissonance/sharpcookiemonster

C# tool to dump all cookies from Chrome/Edge browsers, including httpOnly and secure flags, for session hijacking and post-exploitation credential…

information-gatheringpassword-attackspost-exploitation+1
2043 years ago
Flask-Unsign preview

Flask-Unsign

GitHubparadoxis/flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

ctfpassword-attackspenetration-testing+1
6601 year ago
SharpLAPS preview

SharpLAPS

GitHubswisskyrepo/sharplaps

C# tool to retrieve LAPS passwords from Active Directory via LDAP, designed for in-memory execution within Cobalt Strike sessions using…

information-gatheringpassword-attackspost-exploitation+1
4485 years ago
DPAPISnoop preview

DPAPISnoop

GitHubleftp/dpapisnoop

A C# tool to output crackable DPAPI hashes from user MasterKeys

hash-analysispassword-attackspassword-cracking+2
1462 months ago
ADFSpray preview

ADFSpray

GitHubxfreed0m/adfspray

Python3 tool to perform password spraying against Microsoft Online service using various methods

authenticationcloud-securitypassword-attacks+1
886 years ago
GoAWSConsoleSpray preview

GoAWSConsoleSpray

GitHubwhiteoaksecurity/goawsconsolespray

Tool to spray AWS Console IAM Logins

authenticationcloud-securityinformation-gathering+3
364 years ago
Athanasius preview

Athanasius

GitHubshyam999/athanasius

Framework for penetration testing. The software can identify everything from cross-site scripting to SQL injection. Developers can also use this…

password-attackspenetration-testingvulnerability-scanners+1
194 years ago
Previous123…10Next