Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
100 results
Adamantium-Thief preview

Adamantium-Thief

GitHublimerboy/adamantium-thief

:key: (THIS CODE IS OUTDATED FOR NEW CHROME VERSIONS) Decrypt chromium based browsers passwords, cookies, credit cards, history, bookmarks, autofill.…

data-exfiltrationinformation-gatheringmalware-analysis+1
819
1 year ago
elpscrk preview

elpscrk

GitHubd4vinci/elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

information-gatheringosintpassword-attacks+2
9561 year ago
DonPAPI preview

DonPAPI

GitHublogin-securite/donpapi

Automated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…

authenticationinformation-gatheringpassword-cracking+3
1.4k1 year ago
scallion preview

scallion

GitHublachesis/scallion

GPU-based Onion Hash generator

cryptographyinformation-gatheringpassword-cracking+1
1.3k5 years ago
Invoke-WCMDump preview

Invoke-WCMDump

GitHubpeewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

information-gatheringpassword-crackingpenetration-testing+2
7338 years ago
SharpChromium preview

SharpChromium

GitHubdjhohnstein/sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

data-exfiltrationinformation-gatheringpassword-cracking+2
7655 years ago
SMWYG-Show-Me-What-You-Got preview

SMWYG-Show-Me-What-You-Got

GitHubviralmaniar/smwyg-show-me-what-you-got

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text…

information-gatheringosintpassword-cracking+1
5677 years ago
injectify preview

injectify

GitHubsamdenty/injectify

Perform advanced MiTM attacks on websites with ease 💉

command-and-controlinformation-gatheringpassword-cracking+4
6844 years ago
sippts preview

sippts

GitHubpepelux/sippts

Set of tools to audit SIP based VoIP Systems

exploitationfuzzinginformation-gathering+6
5711 month ago
haklistgen preview

haklistgen

GitHubhakluke/haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

information-gatheringpassword-crackingreconnaissance+1
22916 days ago
jackdaw preview

jackdaw

GitHubskelsec/jackdaw

gather gather gather

anomaly-detectioninformation-gatheringpassword-cracking+1
5861 year ago
vortex preview

vortex

GitHubklezvirus/vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

information-gatheringosintpassword-attacks+7
4514 years ago
LeakSearch preview

LeakSearch

GitHubjoelgmsec/leaksearch

Searches and parses plaintext passwords from public breach databases (ProxyNova COMB) by keyword (user/domain/password), with proxy support and…

data-exfiltrationinformation-gatheringosint+1
4411 year ago
Sinister preview

Sinister

GitHubpushpenderindia/sinister

Sinister is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

data-exfiltrationinformation-gatheringpassword-cracking+5
4651 year ago
CVE-2025-24071_PoC preview

CVE-2025-24071_PoC

GitHub0x6rss/cve-2025-24071_poc

CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

exploitationinformation-gatheringpassword-cracking+3
4041 year ago
swap_digger preview

swap_digger

GitHubsevagas/swap_digger

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux…

digital-forensicsforensicsinformation-gathering+2
5365 years ago
knowsmore preview

knowsmore

GitHubhelviojunior/knowsmore

Correlates NTLM hashes, BloodHound data, and cracked passwords for Active Directory penetration testing. Imports NTDS.dit, syncs to Neo4j, analyzes…

information-gatheringpassword-crackingpenetration-testing
2701 month ago
mXtract preview

mXtract

GitHubrek7/mxtract

mXtract - Memory Extractor & Analyzer

forensicsinformation-gatheringmemory-forensics+2
5874 years ago
Previous123456Next