Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

159 results

azbelt

daddycocoaman/azbelt

AAD related enumeration in Nim

authenticationcloud-securityidentity-access-management+5

1322 years ago

YAPS

nickguitar/yaps

Yet Another PHP Shell - The most complete PHP reverse shell

command-and-controlexploitationinformation-gathering+7

844 years ago

TeamViewer-dumper-in-CPP

kkar/teamviewer-dumper-in-cpp

Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.

information-gatheringpassword-attackspost-exploitation+2

4511 years ago

ghosthound

jvbotelho/ghosthound

GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted…

exploitationinformation-gatheringlateral-movement+5

4311 days ago

keebcap

synacktiv/keebcap

Win32 keylogger that supports all (non-ime using) languages correctly

data-exfiltrationinformation-gatheringpassword-attacks+2

562 years ago

BOF-pack-1

jsecu/bof-pack-1

A care package of useful bofs for red team engagments

information-gatheringpayload-developmentpost-exploitation+2

531 year ago

ldap-swak

syss-research/ldap-swak

LDAP Swiss Army Knife

exploitationinformation-gatheringlateral-movement+3

532 years ago

cyanide

horizon3ai/cyanide

exploitationinformation-gatheringlateral-movement+6

1616 days ago

sccmsqlclient

synacktiv/sccmsqlclient

database-securityexploitationinformation-gathering+6

312 months ago

telegram-c2

tomiwa-ot/telegram-c2

Control a system remotely via telegram

command-and-controlinformation-gatheringpersistence-mechanisms+4

491 year ago

LinPwn

andromeda1957/linpwn

Interactive post-exploitation tool for Linux privilege escalation, enumeration, file exfiltration, and credential harvesting via reverse shell.

information-gatheringpassword-crackingpenetration-testing+2

376 years ago

Hawk

prodefense/hawk

Golang tool designed to exfiltrate passwords found via the sshd and su services

data-exfiltrationinformation-gatheringpassword-attacks+3

389 months ago

GeoLocation_BOF

codextf2/geolocation_bof

Cobalt Strike BOF that retrieves Windows geolocation coordinates via WinRT and legacy ILocation APIs, with automatic registry permission management.

information-gatheringosintpost-exploitation+2

301 month ago

vger

josephtlucas/vger

An interactive CLI application for interacting with authenticated Jupyter instances.

ai-securitycommand-and-controlexploitation+8

581 year ago

VertXploit

coldfusion39/vertxploit

Exploiting HID VertX and EDGE access control systems

exploitationhardware-iot-securityinformation-gathering+3

259 years ago

GetLAPSPassword

dru1d-foofus/getlapspassword

A LAPS dumper written using the impacket library.

information-gatheringpenetration-testingpost-exploitation+1

313 years ago

e013

keyboard-slayer/e013

VBScript tool that extracts and displays saved Wi-Fi passwords from Windows systems, outputting credentials to a text file for local access.

information-gatheringpassword-attackspost-exploitation+1

275 years ago

cua-kit

preludeorg/cua-kit

Tools for attacking Computer Use Agents

ai-securitycommand-and-controlexploitation+7

337 months ago

Previous 1…678 9 Next