Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
102 results
CVE-2026-Discord preview

CVE-2026-Discord

GitHubnicetop1027/cve-2026-discord
data-exfiltrationexploitationpenetration-testing+3
6 months ago
LdrLockLiberator preview

LdrLockLiberator

GitHubelliotkillick/ldrlockliberator

For when DLLMain is the only way

exploitationpayload-developmentpersistence-mechanisms+2
4351 year ago
SubSeven preview

SubSeven

GitHubdarkcodersc/subseven

SubSeven Legacy Official Source Code Repository

persistence-mechanismspost-exploitationremote-access-tool+1
6522 years ago
DropSpawn_BOF preview

DropSpawn_BOF

GitHuboctoberfest7/dropspawn_bof

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

binary-exploitationexploitationpayload-development+4
2873 years ago
ContextMenuHijack preview

ContextMenuHijack

GitHubristbs/contextmenuhijack

Execute a payload at each right click on a file/folder in the explorer menu for persistence

payload-developmentpersistence-mechanismspost-exploitation+1
1733 years ago
FsquirtCPLPoC preview

FsquirtCPLPoC

GitHubmhaskar/fsquirtcplpoc

PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

binary-exploitationcommand-and-controlexploitation+5
1217 months ago
macos_app_structure preview

macos_app_structure

GitHubyo-yo-yo-jbo/macos_app_structure

Educational deep dive into macOS app bundles, plist files, and launchd process behavior, with offensive security notes on packaging payloads as .app…

educationids-ips-evasionpayload-development+2
471 month ago
macos-collector preview

macos-collector

GitHublethal-forensics/macos-collector

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

digital-forensicsforensicsincident-response+2
491 month ago
RCLocals preview

RCLocals

GitHubyjesus/rclocals

Linux startup analyzer

defensive-toolsforensicshash-analysis+4
661 year ago
freebsd_kernel_hacking preview

freebsd_kernel_hacking

GitHubxcellerator/freebsd_kernel_hacking

Learning FreeBSD Kernel Hacking - Exercises

binary-exploitationeducationexploitation+3
666 years ago
SNEK_Equinox preview

SNEK_Equinox

GitHubthe-snek-initiative/snek_equinox

Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse

defensive-toolsexploitationids-ips-evasion+3
422 months ago
WinRAR-CVE-2025-8088-PoC-RAR preview

WinRAR-CVE-2025-8088-PoC-RAR

GitHubknight0x07/winrar-cve-2025-8088-poc-rar

WinRAR 0day CVE-2025-8088 PoC RAR Archive

exploitationmalware-analysispayload-generation+3
441 year ago
DylibHijackTest preview

DylibHijackTest

GitHubslyd0g/dylibhijacktest

Discover DYLD_INSERT_LIBRARIES hijacks on macOS

binary-analysisdynamic-analysis-sandboxingpersistence-mechanisms+2
453 years ago
CVE-2017-4490-install-Script-Python-in-Terminal- preview

CVE-2017-4490-install-Script-Python-in-Terminal-

GitHubhomjxi0e/cve-2017-4490-install-script-python-in-terminal-
command-and-controlexploitationpersistence-mechanisms+2
9 years ago
poisontap preview

poisontap

GitHubsamyk/poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using…

authenticationcommand-and-controldata-exfiltration+7
6.5k7 years ago
Active-Directory-Exploitation-Cheat-Sheet preview

Active-Directory-Exploitation-Cheat-Sheet

GitHubintegration-it/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

curated-resourcesdata-exfiltrationeducation+6
2.8k1 year ago
AsyncRAT-C-Sharp preview

AsyncRAT-C-Sharp

GitHubnyan-x-cat/asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

command-and-controldata-exfiltrationpassword-cracking+5
3.0k2 years ago
GraphSpy preview

GraphSpy

GitHubredbyte1337/graphspy

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

authenticationcloud-securitydata-exfiltration+6
1.4k2 months ago
Previous123456Next