Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
63 results
Mythic preview

Mythic

GitHubits-a-feature/mythic

A collaborative, multi-platform, red teaming framework

command-and-controldata-exfiltrationexploitation+9
4.8k
6 days ago
Viper preview

Viper

GitHubfunnywolf/viper

Adversary simulation and Red teaming platform with AI

adversarial-attackai-securitycommand-and-control+5
5.3k3 months ago
inceptor preview

inceptor

GitHubklezvirus/inceptor

Template-Driven AV/EDR Evasion Framework

exploit-frameworkspayload-generationpenetration-testing-frameworks+1
1.8k3 years ago
secator preview

secator

GitHubfreelabz/secator

secator - the pentester's swiss knife

dns-analysisexploit-frameworksfuzzing+8
1.3k2 days ago
PoshC2 preview

PoshC2

GitHubnettitude/poshc2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

command-and-controllateral-movementpayload-generation+3
2.1k1 year ago
C2concealer preview

C2concealer

GitHubredsiege/c2concealer

Generates randomized, lint-validated C2 malleable profiles for Cobalt Strike, automating HTTP/S, DNS, SMB, and SSH beacon configuration with…

command-and-controlpayload-generationpenetration-testing-frameworks+1
1.1k5 months ago
dronesploit preview

dronesploit

GitHubdronesploit/dronesploit

Metasploit-style console framework for pentesting commercial drones, featuring modular exploits for wireless attacks, SSID/password manipulation, and…

exploit-frameworkshardware-iot-securitypenetration-testing-frameworks+2
2.2k1 year ago
Redcloud preview

Redcloud

GitHubkhast3x/redcloud

Automated Red Team Infrastructure deployement using Docker

container-securityexploit-frameworkspenetration-testing-frameworks+1
1.3k4 years ago
external_c2_framework preview

external_c2_framework

GitHubund3rf10w/external_c2_framework

Python api for usage with cobalt strike's External C2 specification

command-and-controlexploit-frameworkspayload-development+3
2394 years ago
AutoTTP preview

AutoTTP

GitHubjymcheong/autottp

Automated Tactics Techniques & Procedures

command-and-controleducationexploit-frameworks+4
2626 years ago
Medusa preview

Medusa

GitHubmythicagents/medusa

Cross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…

command-and-controlexploit-frameworkslateral-movement+8
2101 month ago
AutoPentest-DRL preview

AutoPentest-DRL

GitHubcrond-jaist/autopentest-drl

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning

educationexploit-frameworksmachine-learning+4
4484 years ago
thanatos preview

thanatos

GitHubmythicagents/thanatos

Mythic C2 agent targeting Linux and Windows hosts written in Rust

command-and-controlexploit-frameworkslateral-movement+4
4090 years ago
Nimplant preview

Nimplant

GitHubmythicagents/nimplant

A cross-platform implant written in Nim

command-and-controlpayload-developmentpenetration-testing-frameworks+2
1763 years ago
zuthaka preview

zuthaka

GitHubpucarasec/zuthaka

Open-source C2 integration framework providing a unified web interface for managing multiple command-and-control instances, listeners, agents, and…

command-and-controlexploit-frameworkspenetration-testing-frameworks+2
1813 years ago
BugBuntu preview

BugBuntu

GitHubhalencarjunior/bugbuntu

BugBuntu Linux

curated-resourceseducationinformation-gathering+4
1605 years ago
gallia preview

gallia

GitHubfraunhofer-aisec/gallia

Extendable pentesting framework for automotive UDS interfaces, enabling reproducible scans, diagnostic trouble code reading, and post-processing via…

fuzzingpenetration-testing-frameworks
1624 days ago
Exploitivator preview

Exploitivator

GitHubn1ckdunn/exploitivator

Automate Metasploit scanning and exploitation

exploit-frameworkspayload-developmentpenetration-testing-frameworks+1
1191 year ago
Previous1234Next