Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
95 results
bramble preview

bramble

GitHubflythenimbus/bramble

Offline-first password manager with direct device-to-device sync

authenticationcryptographyencryption-decryption-tools+7
315
1 day ago
airgorah preview

airgorah

GitHubmartin-olivier/airgorah

A WiFi security auditing software mainly based on aircrack-ng tools suite

information-gatheringpassword-crackingpenetration-testing+2
1.1k4 days ago
linWinPwn preview

linWinPwn

GitHublefayjey/linwinpwn

Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…

exploitationinformation-gatheringpassword-cracking+3
2.2k12 days ago
keelog-bof preview

keelog-bof

GitHubjakobfriedl/keelog-bof

Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.

information-gatheringpassword-crackingpost-exploitation+2
5028 days ago
sklad preview

sklad

GitHubrench321/sklad

Industrial-grade secure snippet warehouse for your system tray. 📦 Built with Rust (Tauri v2) & React. Offline-first, AES-256 encrypted, and…

authenticationencryption-decryption-toolsgeneral-purpose-utilities+3
1731 month ago
cupp preview

cupp

GitHubmebus/cupp

Interactive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…

information-gatheringosintpassword-attacks+1
6.5k1 month ago
CVE-2025-44203 preview

CVE-2025-44203

GitHubivant7d3/cve-2025-44203

Exploit for CVE-2025-44203 targeting a race condition in HotelDruid 3.0.0/3.0.7 that leaks admin credentials and causes denial of service. Includes a…

exploitationinformation-gatheringpassword-cracking+2
1 month ago
awesome-privacy preview

awesome-privacy

GitHubpluja/awesome-privacy

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

curated-resourceseducationencryption-decryption-tools+5
19.6k1 month ago
ntlmv1-multi preview

ntlmv1-multi

GitHubevilmog/ntlmv1-multi

NTLMv1 Multitool

authenticationcryptographyencryption-decryption-tools+3
6711 month ago
DPAPISnoop preview

DPAPISnoop

GitHubleftp/dpapisnoop

A C# tool to output crackable DPAPI hashes from user MasterKeys

hash-analysispassword-attackspassword-cracking+2
1462 months ago
CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction preview

CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction

GitHubdhananjayasj/cve-2024-1698-notificationx-wordpress-plugin-sql-injection-to-admin-credential-extraction

Unauthenticated time-based blind SQL injection exploit for NotificationX WordPress plugin (CVE-2024-1698) that extracts admin username and password…

exploitationinformation-gatheringpassword-cracking+3
2 months ago
CVE-2021-43798 preview

CVE-2021-43798

GitHubokymi-x/cve-2021-43798
encryption-decryption-toolsexploitationinformation-gathering+3
2 months ago
passwordcheck preview

passwordcheck

GitHubrclone/passwordcheck

Check rclone config files for insecure passwords

configuration-auditingcryptographypassword-cracking+2
272 months ago
GrafTraverse-CVE-2021-43798 preview

GrafTraverse-CVE-2021-43798

GitHubasbawy/graftraverse-cve-2021-43798

CVE-2021-43798 MiNi Exploitation Framework

exploitationinformation-gatheringpassword-cracking+4
2 months ago
emploleaks preview

emploleaks

GitHubinfobyte/emploleaks

An OSINT tool that helps detect members of a company with leaked credentials

data-exfiltrationemail-harvestinginformation-gathering+8
7873 months ago
vss-fr2system preview

vss-fr2system

GitHubsailay1996/vss-fr2system

test

exploitationpassword-crackingpenetration-testing+4
1083 months ago
Moniker-Link--CVE-2024-21413- preview

Moniker-Link--CVE-2024-21413-

GitHubbhatbhupendra/moniker-link--cve-2024-21413-
educationemail-securityexploitation+7
3 months ago
htb-facts preview

htb-facts

GitHubmattiapertusati/htb-facts

HackTheBox — Facts (Easy/Linux) | CVE-2025-2304 + AWS S3 + SSH Key + Facter PrivEsc

cloud-securityctfeducation+7
4 months ago
Previous123456Next