Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
547 results
gitpwnd preview

gitpwnd

GitHubnccgroup/gitpwnd

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

command-and-controlpenetration-testingpersistence-mechanisms+3
147
5 years ago
Pyramid preview

Pyramid

GitHubnaksyn/pyramid

a tool to help operate in EDRs' blind spots

penetration-testingpost-exploitationred-teaming
7752 years ago
Evasor preview

Evasor

GitHubcyberark/evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

binary-analysisdefensive-toolspenetration-testing+3
3256 years ago
ica2tcp preview

ica2tcp

GitHubsynacktiv/ica2tcp

A SOCKS proxy for Citrix.

lateral-movementpenetration-testingpost-exploitation+3
1003 years ago
LinPwn preview

LinPwn

GitHubandromeda1957/linpwn

Interactive post-exploitation tool for Linux privilege escalation, enumeration, file exfiltration, and credential harvesting via reverse shell.

information-gatheringpassword-crackingpenetration-testing+2
377 years ago
DeadMatter preview

DeadMatter

GitHubqsecure-labs/deadmatter

Offset Independent Credential Extraction Tool

data-recoverydigital-forensicsforensics+7
691 year ago
mscache preview

mscache

GitHubqax-a-team/mscache

a tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket

authenticationpassword-crackingpost-exploitation
678 years ago
ibombshell preview

ibombshell

GitHubtelefonica/ibombshell

Tool to deploy a post-exploitation prompt at any time

command-and-controlids-ips-evasionpayload-generation+5
3205 years ago
EchoDrv preview

EchoDrv

GitHubyolop0wn/echodrv

Exploitation of echo_driver.sys

exploitationids-ips-evasionpost-exploitation+2
1673 years ago
AD-description-password-finder preview

AD-description-password-finder

GitHubassurancemaladiesec/ad-description-password-finder

Retrieve AD accounts description and search for password in it

authenticationdefensive-toolsinformation-gathering+5
814 years ago
CVE-2024-32019-ndsudo preview

CVE-2024-32019-ndsudo

GitHubjustjoeyking/cve-2024-32019-ndsudo

Bash-based privilege escalation exploit for CVE-2024-32019 in Netdata Agent's ndsudo tool, leveraging untrusted PATH search to execute arbitrary…

exploitationpenetration-testingpost-exploitation+3
10 months ago
SharpStrike preview

SharpStrike

GitHubiomoath/sharpstrike

A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

command-and-controldata-exfiltrationinformation-gathering+6
1985 years ago
Dragnmove preview

Dragnmove

GitHuboccamsxor/dragnmove

Infect Shared Files In Memory for Lateral Movement

lateral-movementpost-exploitationred-teaming
1893 years ago
mimikittenz preview

mimikittenz

GitHuborlyjamie/mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

information-gatheringmemory-forensicspenetration-testing+1
1.9k5 years ago
Sub7 preview

Sub7

GitLabillwill/sub7

Source code for SubSeven 2.1.3

command-and-controlmalware-analysispayload-generation+2
153 years ago
below-log-race-poc preview

below-log-race-poc

GitHubdanil-koltsov/below-log-race-poc

PoC for CVE-2025-27591 – Local privilege escalation in the below monitoring tool. By symlinking its log file to /etc/passwd, an attacker can inject a…

exploitationpenetration-testingpost-exploitation+3
11 year ago
NetRipper preview

NetRipper

GitHubnytrorst/netripper

NetRipper - Smart traffic sniffing for penetration testers

packet-sniffing-analysispenetration-testingpost-exploitation
1.4k4 years ago
gpoParser preview

gpoParser

GitHubsynacktiv/gpoparser

gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.

configuration-auditinginformation-gatheringlateral-movement+7
3755 months ago
Previous12…31Next