Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

26 results

JWTweak

rishuranjanofficial/jwtweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

authenticationcryptographypayload-generation+3

103

2 months ago

QuasarNix

dtrizna/quasarnix

Reverse Shell Detection with Machine Learning

adversarial-attackanomaly-detectiondefensive-tools+6

73 months ago

unicorn

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

command-and-controlexploit-frameworksids-ips-evasion+8

3.9k3 months ago

SimpleRemoter

yuanyuanxiang/simpleremoter

A remote control program based on Gh0st: 实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。项目代码仅限于学习和交流用途。

command-and-controleducationlateral-movement+6

1.4k3 months ago

SynthAPT

acedef/synthapt

Playbook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…

adversarial-attackai-securitycommand-and-control+8

2354 months ago

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

ac8999/prtg-network-monitor-18.2.38---authenticated-remote-code-execution-cve-2018-9276

Python Exploit for CVE: 2018-9276

command-and-controlexploitationpayload-generation+3

5 months ago

CVE-2026-23830-SandBreak

galaxy-sc/cve-2026-23830-sandbreak

Generates and delivers exploit payloads for CVE-2026-23830, a SandboxJS escape, with modes for blind OOB exfiltration and local calc PoC. Supports…

exploitationpayload-generationpenetration-testing+3

16 months ago

MsfMania

lepotekil/msfmania

Python AV Evasion Tools

binary-analysiseducationencryption-decryption-tools+9

51610 months ago

sshimpanzee

lexfo/sshimpanzee

SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)

command-and-controldns-analysisnetwork-security+4

2941 year ago

CVE-2025-0282-Full-version

anonstorks/cve-2025-0282-full-version

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

binary-exploitationeducationexploitation+5

41 year ago

hfs-cve-2014-6287-exploit

francescobrina/hfs-cve-2014-6287-exploit

Python-based exploit for CVE-2014-6287 in HTTP File Server 2.3.x, delivering a reverse shell via Base64-encoded PowerShell payload for authorized…

command-and-controleducationexploitation+5

1 year ago

CrucibleC2

dragoqcc/cruciblec2

A C# Command & Control framework

command-and-controlexploit-frameworkslateral-movement+5

1.0k2 years ago

GodGenesis

saumyajeetdas/godgenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

command-and-controldata-exfiltrationinformation-gathering+5

5312 years ago

Archived

adbsploit

mesquidar/adbsploit

A python based tool for exploiting and managing Android devices via ADB

android-securitydata-exfiltrationexploitation+6

9043 years ago

CVE-2021-34527

m8sec/cve-2021-34527

PrintNightmare (CVE-2021-34527) PoC Exploit

exploitationlateral-movementpayload-generation+3

1183 years ago

Brosec

gabemarshall/brosec

Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.

encryption-decryption-toolsexploitationinformation-gathering+7

3505 years ago

GadgetToJScript

med0x2e/gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…

adversarial-attackexploitationlateral-movement+5

1.1k5 years ago

Octopus

mhaskar/octopus

Open source pre-operation C2 server based on python and powershell

command-and-controlencryption-decryption-toolsinformation-gathering+3

7655 years ago

Previous12 Next