Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

33 results

azureOutlookC2

boku7/azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North…

api-securitycloud-securitycommand-and-control+2

504

3 years ago

Jormungandr

idov31/jormungandr

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

adversarial-attackpayload-developmentpost-exploitation+1

2443 years ago

CVE-2025-8088-Multi-Document

pentestfunctions/cve-2025-8088-multi-document

Exploit systems using older WinRAR without knowing their username (unlike other projects)

binary-exploitationeducationexploitation+4

361 year ago

Eaton-UPS-Companion-Exploit

ravss/eaton-ups-companion-exploit

This repository details CVE-2020-6650, a vulnerability I discovered within Eaton's UPS Companion. All users should upgrade to v1.06 immediately or…

command-and-controlexploitationpayload-development+5

16 years ago

CVE-2025-2563

nxploited/cve-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is…

educationexploitationpayload-development+5

16 months ago

Beginners-Guide-to-Obfuscation

bc-security/beginners-guide-to-obfuscation

Hands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…

educationids-ips-evasionlabs-practice+3

1.1k2 years ago

No-Consolation

fortra/no-consolation

A BOF that runs unmanaged PEs inline

ids-ips-evasionpayload-developmentpenetration-testing-frameworks+2

7022 years ago

waf-community-bypasses

waf-bypass-maker/waf-community-bypasses

Curated CSV collection of community-sourced Web Application Firewall bypass payloads for testing and validating WAF protections.

curated-resourcespayload-developmentpenetration-testing+3

5492 years ago

defcon33_silence_kill_edr

arosenmund/defcon33_silence_kill_edr

Hands-on DEFCON workshop materials for killing and silencing EDR agents: lab setup, BYOVD, custom C/C++ evasion tooling, and reverse engineering.

adversarial-attackeducationlabs-practice+6

3461 year ago

UnhookMe

mgeeky/unhookme

Dynamic Windows API resolver and unhooker that detects and restores hooked functions (IAT, EAT, inline patches) to invoke unmonitored system calls…

defensive-toolspayload-developmentred-teaming

3484 years ago

RandomTSScripts

xpn/randomtsscripts

Collection of RedTeam engagement scripts including Pre2K default credential checks via TGS, LAPSv2 password decryption, and IIS App Pool credential…

exploitationpassword-attackspayload-development+4

2122 years ago

Phoenix-Framework

xm0kht4r/phoenix-framework

Post-exploitation framework that abuses trusted sites like Telegram and Discord for C2.

command-and-controldata-exfiltrationpayload-development+5

716 months ago

unhook-bof

cobalt-strike/unhook-bof

Remove API hooks from a Beacon process.

ids-ips-evasionpayload-developmentpenetration-testing-frameworks+2

774 years ago

DRMBinViaOrdinalImports

maldev-academy/drmbinviaordinalimports

Create Anti-Copy DRM Malware

adversarial-attackbinary-analysismalware-analysis+2

732 years ago

Kernel_VADInjector

lleon1435/kernel_vadinjector

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

adversarial-attackids-ips-evasionpayload-development+3

543 years ago

CVE-2024-24576-Exploit

aydinnyunus/cve-2024-24576-exploit

CVE-2024-24576 Proof of Concept

binary-exploitationexploitationpayload-development+3

202 years ago

CVE-2017-5638

mritunjay-k/cve-2017-5638

An exploit for CVE-2017-5638

exploitationpayload-developmentpenetration-testing+2

3 years ago

liffy

mzfr/liffy

Local file inclusion exploitation tool

payload-developmentpenetration-testingvulnerability-analysis+2

9785 months ago

Previous12 Next