Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
417 results
ToRat preview
Archived

ToRat

GitHubluantak/torat

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

privilege-escalationpayload-generationpersistence-mechanisms+6
1.0k
3 years ago
DiscordRAT preview
Archived

DiscordRAT

GitHubsp00kyskelet0n/discordrat

Discord Remote Administration Tool fully written in Python3

privilege-escalationpersistence-mechanismslateral-movement+5
4884 years ago
haxx preview
Archived

haxx

GitHubasdfugil/haxx

Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.

privilege-escalationios-securitypersistence-mechanisms+5
1682 years ago
WEASEL preview
Archived

WEASEL

GitHubfacebookarchive/weasel

DNS covert channel implant for Red Teams.

encryption-decryption-toolspersistence-mechanismspost-exploitation+5
7316 years ago
RefleXXion preview
Archived

RefleXXion

GitHubhlldz/reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first…

defensive-toolsprivilege-escalationpersistence-mechanisms+3
4994 years ago
maalik preview
Archived

maalik

GitHubquantumcore/maalik

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

privilege-escalationpersistence-mechanismsexploitation+6
945 years ago
DcRat preview
Archived

DcRat

GitHubqwqdanchun/dcrat

A simple remote tool in C#.

privilege-escalationpayload-generationpersistence-mechanisms+9
1.0k4 years ago
BlackMamba preview
Archived

BlackMamba

GitHubloseys/blackmamba

C2/post-exploitation framework

encryption-decryption-toolspayload-generationpersistence-mechanisms+5
1.2k5 years ago
PowerSploit preview
Archived

PowerSploit

GitHubpowershellmafia/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalationreconnaissancepayload-generation+5
13.1k6 years ago
TinkererShell preview
Archived

TinkererShell

GitHub4n4nk3/tinkerershell

A simple python reverse shell written just for fun.

phishing-toolsprivilege-escalationencryption-decryption-tools+8
623 years ago
Phantom-Evasion preview
Archived

Phantom-Evasion

GitHuboddcod3/phantom-evasion

Python antivirus evasion tool

privilege-escalationdynamic-analysis-sandboxingexploit-frameworks+6
1.4k2 years ago
honeybits preview
Archived

honeybits

GitHub0x4d31/honeybits

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward…

privilege-escalationreconnaissanceosint-social-engineering+5
2787 years ago
sshLooter preview
Archived

sshLooter

GitHubmthbernardes/sshlooter

Script to steal passwords from ssh.

password-crackingpersistence-mechanismspost-exploitation+2
4897 years ago
Empire preview
Archived

Empire

GitHubempireproject/empire

Empire is a PowerShell and Python post-exploitation agent.

privilege-escalationpayload-generationpersistence-mechanisms+6
7.9k6 years ago
sAINT preview
Archived

sAINT

GitHubtiagorlampert/saint

👁️ (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

payload-generationpersistence-mechanismsdata-exfiltration+1
7536 years ago
Radium preview
Archived

Radium

GitHubmehulj94/radium

Python logger with multiple features.

password-crackingphishing-toolspersistence-mechanisms+7
5255 years ago
BrainDamage preview
Archived

BrainDamage

GitHubmehulj94/braindamage

Remote administration service which uses twitter as a command and control server

password-crackingpersistence-mechanismslateral-movement+5
7145 years ago
Dr0p1t-Framework preview
Archived

Dr0p1t-Framework

GitHubd4vinci/dr0p1t-framework

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

privilege-escalationpayload-generationpersistence-mechanisms+9
1.5k7 years ago
Previous1…222324Next