Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

430 results

Archived

SSH-Snake

megamansec/ssh-snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

information-gatheringlateral-movementnetwork-mapping+5

2.3k

6 months ago

Archived

hermes

0xbbuddha/hermes

A Python agent targeting Linux for Mythic C2

command-and-controlencryption-decryption-toolslateral-movement+6

187 months ago

Archived

adbsploit

mesquidar/adbsploit

A python based tool for exploiting and managing Android devices via ADB

android-securitydata-exfiltrationexploitation+6

9073 years ago

Archived

pentestly

praetorian-inc/pentestly

Python and Powershell internal penetration testing framework

command-and-controlexploitationinformation-gathering+8

72010 years ago

Archived

0xsp-Mongoose

zux0x3a/0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

command-and-controldns-analysisexploitation+8

5334 years ago

ad_attack_architecture

kypvas/ad_attack_architecture

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

curated-resourceseducationidentity-management+7

361 month ago

red-team-map

kypvas/red-team-map

Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact

command-and-controlcurated-resourceseducation+7

3024 days ago

Archived

BrainDamage

mehulj94/braindamage

Remote administration service which uses twitter as a command and control server

command-and-controldata-exfiltrationinformation-gathering+5

7135 years ago

Archived

THM-Steel_Mountain-CVE-2014-6287

wizardy0ga/thm-steel_mountain-cve-2014-6287

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

ctfeducationexploitation+7

4 years ago

Archived

gato

praetorian-inc/gato

GitHub Actions Pipeline Enumeration and Attack Tool

devsecopsexploitationinformation-gathering+7

95 months ago

Archived

Radium

mehulj94/radium

Python logger with multiple features.

command-and-controldata-exfiltrationinformation-gathering+7

5255 years ago

Get-NetNTLM

elnerd/get-netntlm

Powershell module to get the NetNTLMv2 hash of the current user

hash-analysisinformation-gatheringpassword-attacks+4

974 years ago

Overthrone

karmanya03/overthrone

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

command-and-controlexploit-frameworksinformation-gathering+8

2018 days ago