Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

106 results

CVE-2026-92680

grepstrength/cve-2026-92680

Proof-of-concept decrypting Araxis Merge's DPAPI-protected server credentials (CVE-2026-92680), demonstrating insufficiently protected credential…

cryptographyexploitationpassword-cracking+1

2 days ago

CVE-2019-9053

4nner/cve-2019-9053

Python 3 exploit for CVE-2019-9053, a CMS Made Simple SQL injection vulnerability, enabling credential extraction via time-based blind SQLi and…

exploitationpassword-crackingpenetration-testing+3

113 years ago

monitorsfour

ledksv/monitorsfour

HackTheBox MonitorsFour walkthrough covering credential leak, CVE-2025-24367 Cacti RCE, and CVE-2025-9074 Docker Desktop API container escape to root.

container-escapectfeducation+7

3 months ago

DEVVORTEX

r3fr4kt/devvortex

HackTheBox Devvortex walkthrough covering subdomain fuzzing, Joomla API enumeration, template-based web shell, bcrypt hash cracking, and Apport-CLI…

ctfeducationinformation-gathering+7

13 days ago

zyxel-p870hn-hardware-hacking

danyw24/zyxel-p870hn-hardware-hacking

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.

educationembedded-systems-securityexploitation+6

1 month ago

PowerShellForPentesters

dievus/powershellforpentesters

Course repository for PowerShell for Pentesters Course

educationinformation-gatheringlabs-practice+5

4404 years ago

SharpNTLMRawUnHide

x-c3ll/sharpntlmrawunhide

C# version of NTLMRawUnHide

hash-analysisnetwork-securitypacket-sniffing-analysis+2

723 years ago

ShuckNT

yanncam/shucknt

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based…

authenticationcryptographyhash-analysis+3

781 year ago

gorilla

andreiverse/gorilla

tool for generating wordlists or extending an existing one using mutations.

crawlerinformation-gatheringpassword-attacks+1

3907 months ago

nightcrawler

garagehq/nightcrawler

Local AI powered red teamer on a phone

ai-securitycommand-and-controlexploitation+7

8141 month ago

perl-CryptX

dcit/perl-cryptx

Perl cryptographic toolkit providing symmetric ciphers, AEAD modes, hash functions, MACs, public-key cryptography, key derivation, and secure random…

authenticationcryptographyencryption-decryption-tools+3

4125 days ago

nec_aterm_tools

infobyte/nec_aterm_tools

Extracts hardware random keys from NEC Aterm router firmware images and QR codes to generate valid passwords for gaining shell access.

embedded-systems-securityexploitationfirmware-analysis+4

34 years ago

Chrome-Extractor

d4vinci/chrome-extractor

Python script that will extract all saved passwords from your google chrome database on windows only

data-exfiltrationdigital-forensicsforensics+2

8610 years ago

iPhoneRestrictionsPasscodeBF

elevenpaths/iphonerestrictionspasscodebf

Extracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.

data-recoverydigital-forensicsencryption-decryption-tools+4

159 years ago

teamviewer-dumper

attackercan/teamviewer-dumper

Dump TeamViewer ID and password from memory. Works much better than other tools.

digital-forensicsforensicsinformation-gathering+3

988 years ago

ParanoiDF

patrickdw123/paranoidf

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

data-recoverydigital-forensicsencryption-decryption-tools+6

1123 years ago

Aegis

beemdevelopment/aegis

A free, secure and open source app for Android to manage your 2-step verification tokens.

android-securityauthenticationauthentication-authorization+5

13.2k19 days ago

CVE-2024-44541

pointedsec/cve-2024-44541

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack.…

educationexploitationpassword-cracking+3

1 year ago

Previous12 3 4 5 6 Next