Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
362 results
DNS-Tunnel-Keylogger preview

DNS-Tunnel-Keylogger

GitHubgeeoon/dns-tunnel-keylogger

Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls.

command-and-controldata-exfiltrationdns-analysis+2
2802 years ago
BetterBackdoor preview

BetterBackdoor

GitHubthatcherclough/betterbackdoor

A backdoor with a multitude of features.

command-and-controldata-exfiltrationpassword-cracking+4
2931 year ago
CVE-2023-24055_PoC preview

CVE-2023-24055_PoC

GitHubalt3kx/cve-2023-24055_poc

CVE-2023-24055 PoC (KeePass 2.5x)

data-exfiltrationexploitationpassword-attacks+3
2533 years ago
KeeFarceReborn preview

KeeFarceReborn

GitHubd3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

data-exfiltrationpassword-attackspayload-generation+3
2993 years ago
Bella preview

Bella

GitHub00xglitch/bella

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

command-and-controldata-exfiltrationids-ips-evasion+8
2053 years ago
MoreImpacketExamples preview

MoreImpacketExamples

GitHubicyguider/moreimpacketexamples

More examples using the Impacket library designed for learning purposes.

data-exfiltrationeducationlateral-movement+3
2683 years ago
APEX preview

APEX

GitHubluemmelsec/apex

Azure Post Exploitation Framework

cloud-securitydata-exfiltrationexploit-frameworks+4
2489 months ago
Dumpy preview

Dumpy

GitHubkudaes/dumpy

Reuse open handles to dynamically dump LSASS.

data-exfiltrationexploitationids-ips-evasion+3
2462 years ago
FudgeC2 preview

FudgeC2

GitHubziconius/fudgec2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

command-and-controldata-exfiltrationexploit-frameworks+7
2533 years ago
SteaLinG preview

SteaLinG

GitHubde3vil/stealing

The SteaLinG is an open-source penetration testing framework designed for social engineering

data-exfiltrationpayload-generationpenetration-testing-frameworks+4
2462 years ago
PixelCode-Attack preview

PixelCode-Attack

GitHubs3n4t0r-0x0/pixelcode-attack

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

command-and-controldata-exfiltrationeducation+8
1716 months ago
DLLPasswordFilterImplant preview

DLLPasswordFilterImplant

GitHubgosecure/dllpasswordfilterimplant

DLL Password Filter Implant with Exfiltration Capabilities

data-exfiltrationpenetration-testingpersistence-mechanisms+2
1366 years ago
poet preview

poet

GitHubofflinemark/poet

[unmaintained] Post-exploitation tool

command-and-controldata-exfiltrationpayload-generation+4
18110 years ago
RAT-via-Telegram preview

RAT-via-Telegram

GitHubdviros/rat-via-telegram

Windows Remote Post Breach Tool via Telegram

command-and-controldata-exfiltrationinformation-gathering+7
1358 years ago
ZeroCrumb preview

ZeroCrumb

GitHubinternetangel/zerocrumb

Dumping App Bound Protected Credentials & Cookies Without Privileges.

command-and-controldata-exfiltrationexploitation+6
1711 year ago
DocPlz preview

DocPlz

GitHubsaadahla/docplz

Documents Exfiltration project for fun and educational purposes

data-exfiltrationpost-exploitationred-teaming
1432 years ago
SSH-Stealer preview

SSH-Stealer

GitHubdarkspacesecurity/ssh-stealer

Smart keylogging capability to steal SSH Credentials including password & Private Key

data-exfiltrationpassword-attackspenetration-testing+2
1541 year ago
SharpStrike preview

SharpStrike

GitHubiomoath/sharpstrike

A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

command-and-controldata-exfiltrationinformation-gathering+6
1984 years ago
Previous1…151617…21Next