Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

117 results

WHP

51x/whp

Micro$oft Windows Hacking Pack

exploitationlateral-movementpassword-cracking+5

5268 years ago

SharpNoPSExec

juliourena/sharpnopsexec

Get file less command execution for lateral movement.

lateral-movementpenetration-testingpost-exploitation+1

6394 years ago

SharpSecDump

g0ldengunsec/sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

lateral-movementpenetration-testingpost-exploitation

6145 years ago

StopDefender

lab52io/stopdefender

Stop Windows Defender programmatically

adversarial-attackimpersonation-toolspost-exploitation+2

9863 years ago

SharpSCCM

mayyhem/sharpsccm

C# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…

authenticationlateral-movementnetwork-security+3

7034 months ago

ThievingFox

slowerzs/thievingfox

lateral-movementpenetration-testingpost-exploitation+1

5712 years ago

mssqlproxy

blackarrowsec/mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

database-securitylateral-movementpenetration-testing+1

7745 years ago

SSHPry2.0

nopernik/sshpry2.0

SSHPry v2 - Spy & Control os SSH Connected client's TTY

command-and-controlphishing-toolspost-exploitation+2

4008 years ago

SharpImpersonation

s3cur3th1ssh1t/sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

impersonation-toolspost-exploitationprivilege-escalation+1

4214 years ago

SharpMove

0xthirteen/sharpmove

.NET Project for performing Authenticated Remote Execution

lateral-movementpenetration-testingpost-exploitation+2

4103 years ago

Exchange2domain

ridter/exchange2domain

CVE-2018-8581

exploitationlateral-movementpenetration-testing+4

3693 years ago

PowershellKerberos

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

authenticationimpersonation-toolslateral-movement+3

3664 months ago

RedGhost

d4rk007/redghost

Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no…

command-and-controllateral-movementpayload-generation+5

5425 years ago

ligolo-mp

ttpreport/ligolo-mp

Multiplayer pivoting solution

command-and-controllateral-movementpenetration-testing+2

5293 months ago

IHxExec

cicada8-research/ihxexec

Process injection alternative

exploitationlateral-movementpenetration-testing+3

4081 year ago

PivotSuite

redteamoperations/pivotsuite

Network Pivoting Toolkit

command-and-controllateral-movementnetwork-security+3

4592 years ago

DCOMUploadExec

deepinstinct/dcomuploadexec

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

exploitationlateral-movementpayload-development+3

3931 year ago

Amnesiac

leo4j/amnesiac

PowerShell-based post-exploitation framework for lateral movement in Active Directory environments. Executes in-memory with named-pipe command…

command-and-controllateral-movementpenetration-testing+2

45010 months ago

Previous 1 2 345 6 7 Next