Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
Swift-Attack preview

Swift-Attack

GitHubcedowens/swift-attack

Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.

educationlabs-practicepost-exploitation+1
107
3 years ago
xcavator preview

xcavator

GitHubnccgroup/xcavator

A network data locater using credentials obtained during penetration tests

data-exfiltrationinformation-gatheringnetwork-security+3
3312 years ago
pivotool preview

pivotool

GitHubartusec/pivotool

Bash-based post-exploitation tool for semi-automated network pivoting, enabling lateral movement through compromised systems during penetration tests.

lateral-movementpenetration-testingpost-exploitation+1
94 years ago
selenium-node-takeover-kit preview

selenium-node-takeover-kit

GitHubjonstratton/selenium-node-takeover-kit

A collection of selenium tests that might aid it takeover of a selenium node

command-and-controldata-exfiltrationexploit-frameworks+6
28 months ago
portia preview
Archived

portia

GitHubspiderlabs/portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been…

exploitationinformation-gatheringlateral-movement+5
5016 years ago
WinPwn preview

WinPwn

GitHubs3cur3th1ssh1t/winpwn

Automation for internal Windows Penetrationtest / AD-Security

exploitationpenetration-testingpenetration-testing-frameworks+4
3.7k11 months ago
PowerShellForPentesters preview

PowerShellForPentesters

GitHubdievus/powershellforpentesters

Course repository for PowerShell for Pentesters Course

educationinformation-gatheringlabs-practice+5
4414 years ago
AutoTTP preview

AutoTTP

GitHubjymcheong/autottp

Automated Tactics Techniques & Procedures

command-and-controleducationexploit-frameworks+4
2626 years ago
sticky_keys_hunter preview

sticky_keys_hunter

GitHubztgrace/sticky_keys_hunter

A script to test an RDP host for sticky keys and utilman backdoor.

penetration-testingpost-exploitationremote-access-tool+1
2639 years ago
gitpwnd preview

gitpwnd

GitHubnccgroup/gitpwnd

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

command-and-controlpenetration-testingpersistence-mechanisms+3
1453 years ago
Find-AdminAccess preview

Find-AdminAccess

GitHublsecqt/find-adminaccess

This C# tool sprays for admin access over the entire domain

information-gatheringlateral-movementnetwork-mapping+4
908 months ago
perf-exploiter preview

perf-exploiter

GitHubredtimmy/perf-exploiter

CVE-2014-2630 exploit for xglance-bin

binary-exploitationexploitationpenetration-testing+3
56 years ago
pentestly preview
Archived

pentestly

GitHubpraetorian-inc/pentestly

Python and Powershell internal penetration testing framework

command-and-controlexploitationinformation-gathering+8
72110 years ago
Heroinn preview

Heroinn

GitHubb23r0/heroinn

A cross platform C2/post-exploitation framework.

command-and-controlpayload-developmentpenetration-testing-frameworks+4
7113 years ago
Empire-GUI preview

Empire-GUI

GitHubempireproject/empire-gui

Empire client application

command-and-controlpenetration-testing-frameworkspost-exploitation+2
5027 years ago
tap preview

tap

GitHubtrustedsec/tap

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

command-and-controlpenetration-testing-frameworkspersistence-mechanisms+3
5043 years ago
CoercedPotatoRDLL preview

CoercedPotatoRDLL

GitHubsokarepo/coercedpotatordll

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

exploitationpayload-developmentpenetration-testing+4
2272 years ago
specula preview

specula

GitHubtrustedsec/specula
command-and-controlpenetration-testing-frameworkspersistence-mechanisms+2
2371 year ago
Previous12Next