Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

48 results

security-research

mirchr/security-research

Security Research

curated-resourcesexploitationpassword-cracking+5

941 year ago

Complete-google-dorks

nu11secur1ty/complete-google-dorks

Curated collection of Google dork queries for advanced search engine reconnaissance, uncovering exposed databases, configuration files, admin panels,…

database-securitydns-subdomain-enumerationexploitation+7

121 year ago

payloads

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

ctfcurated-resourceseducation+6

4.0k5 years ago

BruteShark

odedshimon/bruteshark

Network Analysis Tool

dns-analysisforensicshash-analysis+4

3.4k4 years ago

NTLMRawUnHide

mlgualtieri/ntlmrawunhide

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

forensicsinformation-gatheringnetwork-security+2

3932 years ago

cook

glitchedgitz/cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

fuzzingpassword-crackingpenetration-testing+1

1.4k7 months ago

vx-underground-wordlist

0xsyr0/vx-underground-wordlist

Wordlist to crack .zip-file password

curated-resourcespassword-attackspassword-cracking

2034 years ago

Stitch

nathanlopez/stitch

Python Remote Administration Tool (RAT)

educationpassword-crackingpayload-generation+2

3.7k9 years ago

CosmicRakp

fin3ss3g0d/cosmicrakp

Go-based tool to exploit CVE-2013-4786 for dumping IPMI password hashes via RAKP authentication, supporting concurrent scanning of IP ranges or…

exploitationinformation-gatheringpassword-cracking+3

4210 months ago

Tenda-F3-V4

4d000/tenda-f3-v4

Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.

embedded-systems-securityexploitationfirmware-analysis+4

31 year ago

ZipRarHunter

s_r_e_e_r_a_j/ziprarhunter

ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.

password-attackspassword-crackingpenetration-testing+1

15 months ago

hcxtools

zerbea/hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

hash-analysispassword-crackingpenetration-testing-frameworks+2

2.5k2 days ago

keeweb

keeweb/keeweb

Free cross-platform password manager compatible with KeePass

authenticationencryption-decryption-toolsgeneral-purpose-utilities+1

13.0k5 months ago

leakScraper

acceis/leakscraper

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help…

data-exfiltrationinformation-gatheringosint+2

4497 years ago

cromos

jimywork/cromos

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

command-and-controldata-exfiltrationlateral-movement+5

1248 years ago

CVE-2025-24054_CVE-2025-24071-PoC

helidem/cve-2025-24054_cve-2025-24071-poc

Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054 / CVE-2025-24071

educationexploitationlabs-practice+5

2211 months ago

cve-2025-24071

fomovet/cve-2025-24071

POC for CVE-2025-24071

educationexploitationlabs-practice+3

3 months ago

CVE-2016-5639

xfox64x/cve-2016-5639

Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules

exploitationexploit-frameworksinformation-gathering+3

26 years ago

Previous12 3 Next