Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
79 results
GoAT preview

GoAT

GitHubpetercunha/goat

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

command-and-controlexploitationlateral-movement+7
261
9 years ago
PersistAssist preview

PersistAssist

GitHubredsiege/persistassist

Fully modular persistence framework

command-and-controlexploitationlateral-movement+7
2593 years ago
khaos-c2 preview

khaos-c2

GitHub28zaaky/khaos-c2

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.

command-and-controllateral-movementpayload-development+5
2272 months ago
DCOMUploadExec preview

DCOMUploadExec

GitHubdeepinstinct/dcomuploadexec

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

exploitationlateral-movementpayload-development+3
3961 year ago
tgt-monitor-bof preview

tgt-monitor-bof

GitHubjakobfriedl/tgt-monitor-bof

Async BOF to automatically extract or renew Kerberos TGTs on a target system.

authenticationlateral-movementpayload-development+3
1351 month ago
DCOMIllusionist preview

DCOMIllusionist

GitHubsynacktiv/dcomillusionist

DCOM in memory and fileless lateral movement techniques through .Net deserilization

authenticationcommand-and-controlexploitation+7
2912 months ago
Hwacha preview

Hwacha

GitHubn00py/hwacha

Deploy payloads to *Nix systems en masse

command-and-controlexploitationlateral-movement+7
1086 years ago
ColdWer preview

ColdWer

GitHub0xsh3llf1r3/coldwer

Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass

exploitationlateral-movementpayload-development+3
1467 months ago
DSCourier_BOF preview

DSCourier_BOF

GitHuboctoberfest7/dscourier_bof

BOF POC of the DSCourier project / invoking WinGet via COM

command-and-controlexploitationlateral-movement+5
904 months ago
trustme preview

trustme

GitHubmeowmycks/trustme

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

command-and-controlexploitationimpersonation-tools+4
1375 months ago
ad-autopwn preview

ad-autopwn

GitHubjonaslejon/ad-autopwn

Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

command-and-controlexploitationlateral-movement+7
411 month ago
Invoke-sAMSpoofing preview

Invoke-sAMSpoofing

GitHubxiaolichan/invoke-samspoofing

CVE-2021-42287/CVE-2021-42278 exploits in powershell

exploitationlateral-movementpayload-development+3
394 years ago
injection preview

injection

GitHubjymcheong/injection

Windows process injection methods

binary-exploitationexploitationlateral-movement+3
98 years ago
CVE-2019-6329 preview

CVE-2019-6329

GitHubmanhndd/cve-2019-6329

Local Privilege Escalation in HP Support Assistant

binary-exploitationexploitationlateral-movement+4
44 years ago
FUCKER preview

FUCKER

GitHubrazureink/fucker

Penetration testing framework with AI-driven decision engine

command-and-controlexploitationlateral-movement+7
1 month ago
CVE-2020-25265-25266 preview

CVE-2020-25265-25266

GitHubrefi64/cve-2020-25265-25266

Proof-of-concept exploit demonstrating CVE-2020-25265 and CVE-2020-25266, using a crafted MP3 file to achieve arbitrary code execution via…

binary-exploitationexploitationlateral-movement+3
25 years ago
shai_hulud preview

shai_hulud

GitHubpresentdaypresenttime/shai_hulud

Worm written in python, abuses CVE-2020-7247

command-and-controlexploitationlateral-movement+3
24 years ago
Blackash-CVE-2025-33073 preview

Blackash-CVE-2025-33073

GitHubirjfifndn-prog/blackash-cve-2025-33073

CVE-2025-33073

command-and-controlexploitationlateral-movement+4
9 months ago
Previous12345Next