Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
108 results
hashcat-utils preview

hashcat-utils

GitHubhashcat/hashcat-utils

Small utilities that are useful in advanced password cracking

general-purpose-utilitieshash-analysispassword-attacks+3
1.6k4 days ago
joomla-bruteforce preview

joomla-bruteforce

GitHubajnik/joomla-bruteforce

Python script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.

authenticationpassword-attackspassword-cracking+4
1412 years ago
GateX preview

GateX

GitHubabraxas/gatex

FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…

binary-analysisbinary-exploitationcryptography+8
125 days ago
OMEN preview

OMEN

GitHubrub-syssec/omen

Markov model-based password guesser in C that enumerates candidates by probability, generating most likely passwords first for hash cracking via…

cryptographyhash-analysispapers-research+3
3357 years ago
Kousei preview

Kousei

GitHubnu11secur1ty/kousei

Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…

exploitationpassword-crackingpayload-generation+6
31 month ago
CVE-2026-89012 preview

CVE-2026-89012

GitHubfaceless0x7/cve-2026-89012

Python exploit for CVE-2026-89012, a Dolibarr SQL filter denylist bypass that uses a blind-boolean oracle to extract password hashes and API keys via…

api-securitydata-exfiltrationexploitation+6
61 month ago
crackerjack preview

crackerjack

GitHubsadreck/crackerjack

Web-based GUI for Hashcat that simplifies password cracking with session management, mask generation, wordlist support, and multi-user access.

cryptographyhash-analysispassword-cracking+3
641 year ago
naive-hashcat preview

naive-hashcat

GitHubbrannondorsey/naive-hashcat

Plug-and-play hashcat wrapper that cracks password hashes using preconfigured dictionary, rule-based, combinator, and mask attacks, supporting dozens…

hash-analysispassword-attackspassword-cracking
1.4k8 years ago
Hashcat-Cheatsheet preview

Hashcat-Cheatsheet

GitHubfrizb/hashcat-cheatsheet

Hashcat reference for OSCP/penetration testing: hash identification, cracking syntax for Linux, Windows, archives, databases, Kerberos tickets, and…

curated-resourceseducationhash-analysis+3
6316 years ago
DPAPISnoop preview

DPAPISnoop

GitHubleftp/dpapisnoop

A C# tool to output crackable DPAPI hashes from user MasterKeys

hash-analysispassword-attackspassword-cracking+2
1464 months ago
ntlmv1-multi preview

ntlmv1-multi

GitHubevilmog/ntlmv1-multi

NTLMv1 Multitool

authenticationcryptographyencryption-decryption-tools+3
6704 months ago
nightcrawler preview

nightcrawler

GitHubgaragehq/nightcrawler

Local AI powered red teamer on a phone

ai-securitycommand-and-controlexploitation+7
6792 months ago
nlahoney preview

nlahoney

GitHubnccgroup/nlahoney

NLA Honeypot Associated Research

authenticationinformation-gatheringnetwork-security+3
105 years ago
tiandy-research preview

tiandy-research

GitHubzb3/tiandy-research

This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware. I found two vulnerabilities that could be used to…

authenticationembedded-systems-securityexploitation+7
306 years ago
passwordcheck preview

passwordcheck

GitHubrclone/passwordcheck

Check rclone config files for insecure passwords

configuration-auditingcryptographypassword-cracking+2
275 years ago
Mutator preview

Mutator

Bitbucketalone/mutator

Generate mutations over a wordlist

fuzzinggeneral-purpose-utilitiespassword-cracking
12 years ago
Chrome-Extractor preview

Chrome-Extractor

GitHubd4vinci/chrome-extractor

Python script that will extract all saved passwords from your google chrome database on windows only

data-exfiltrationdigital-forensicsforensics+2
8710 years ago
fang preview

fang

GitHubevilsocket/fang

A multi service threaded MD5 cracker

cryptographygeneral-purpose-utilitieshash-analysis+1
6810 years ago
Previous123456Next