Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

274 results

CVE-2018-13341

rajchowdhury240/cve-2018-13341

Exploit tool for CVE-2018-13341 that recovers the hidden 'crengsuperuser' password from Crestron TSW-XX60 devices using the MAC address, enabling…

embedded-systems-securityexploitationhardware-iot-security+3

5 years ago

SkyRAT

yschgroup/skyrat

PowerShell-based remote administration tool (RAT) with keylogging, remote shell, and file management capabilities for covert system control.

command-and-controldata-exfiltrationlateral-movement+5

348 years ago

domi-owned

coldfusion39/domi-owned

Automated IBM/Lotus Domino server assessment tool for fingerprinting, directory enumeration, reverse brute force authentication, hash dumping, and…

exploitationinformation-gatheringpassword-attacks+2

1199 years ago

PassMute

hackerinthehouse-official/passmute

CLI password mutation tool applying transformation rules (leet, reverse, case-swap) to generate password variants for security testing and…

password-attackspassword-crackingpenetration-testing

563 years ago

EvilAbigail

strozfriedberg/evilabigail

Automated Linux evil maid attack tool that backdoors initrd images to drop a meterpreter shell and exfiltrate full-disk encryption passwords upon…

exploitationpassword-attackspayload-development+3

43610 years ago

ntlm_relay_gat

ad0nis/ntlm_relay_gat

Automates NTLM relay exploitation using ntlmrelayx.py for SMB share enumeration, shell execution, secrets dumping, and MSSQL command execution via…

command-and-controlexploitationinformation-gathering+5

1712 years ago

Arkhota

alw1ez/arkhota

Android-based HTTP/S brute-force tool for credential testing with customizable wordlists, regex-based success detection, and runtime parameter…

android-securitypassword-attackspenetration-testing+1

203 years ago

iOSRestrictionBruteForce

thehappydinoa/iosrestrictionbruteforce

Brute-force tool that cracks iOS restriction passcodes by extracting PBKDF2 hashes from unencrypted iTunes backups, supporting PIN guessing and…

forensicsios-securitymobile-security+1

3751 month ago

Flask-Unsign

paradoxis/flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

ctfpassword-attackspenetration-testing+1

6611 year ago

easyda

nccgroup/easyda

Shell script for Windows domain penetration testing: finds common password hashes and locates Domain Administrator accounts using pass-the-hash…

lateral-movementpassword-attackspenetration-testing+1

5212 years ago

SSH-KILLv2

xcodeon1/ssh-killv2

SSH brute-force tool targeting jailbroken iPhones with default 'alpine' password, featuring network scanning, wordlist-based cracking, and file…

ios-securitymobile-securitynetwork-mapping+1

95 years ago

wordreaper

nemorous/wordreaper

📜 Scrape targeted wordlists for password cracking using CSS selectors

crawlerctfinformation-gathering+5

514 months ago

RedLogin

parsingteam/redlogin

High-speed SSH brute-force tool with CLI interface, post-attack command execution, and Telegram bot integration for automated report delivery.

password-attackspenetration-testing

1058 years ago

mapchar

pwnfo/mapchar

Generate wordlists using pattern logic and expressions.

password-attackspassword-crackingpayload-generation+2

232 months ago

Klyda

hcbaker/klyda

Highly configurable script for dictionary/spray attacks against online web applications.

information-gatheringpassword-attackspenetration-testing+1

513 years ago

LaZagne

alessandroz/lazagne

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

encryption-decryption-toolsforensicshash-analysis+8

11.0k11 months ago

Yasso

sairson/yasso

Multi-service brute-force, port scanning, web fingerprinting, and one-click exploitation tool for intranet penetration testing. Supports RDP, SSH,…

exploitationlateral-movementpassword-attacks+5

1.6k4 years ago

OpenFire_Decrypt

jas502n/openfire_decrypt

Tool to decrypt OpenFire management console passwords by retrieving the encrypted password and key from the database and applying Blowfish decryption.

database-securityencryption-decryption-toolspassword-attacks+1

305 years ago

Previous12…16 Next