Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
36 results
pacu preview

pacu

GitHubrhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-securitydata-exfiltrationexploit-frameworks+5
5.3k
4 months ago
sandbox-attacksurface-analysis-tools preview

sandbox-attacksurface-analysis-tools

GitHubgoogleprojectzero/sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

defensive-toolsdynamic-analysis-sandboxingexploitation+4
2.3k9 months ago
macOS-enterprise-privileges preview

macOS-enterprise-privileges

GitHubsap/macos-enterprise-privileges

This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…

authentication-authorizationconfiguration-auditingdefensive-tools+2
2.0k9 days ago
PoolParty preview

PoolParty

GitHubsafebreach-labs/poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

exploitationpayload-developmentpost-exploitation+3
1.3k2 years ago
FullPowers preview
Archived

FullPowers

GitHubitm4n/fullpowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

exploitationpenetration-testingpost-exploitation+2
7006 years ago
PXEThief preview

PXEThief

GitHubmwr-cybersec/pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

exploitationinformation-gatheringpassword-attacks+5
4342 years ago
PPLcontrol preview

PPLcontrol

GitHubitm4n/pplcontrol

Windows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.

defensive-toolsexploitationprivilege-escalation+1
4043 years ago
EDRChoker preview

EDRChoker

GitHubtwosevenonet/edrchoker

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.

defensive-toolsids-ips-evasionpersistence-mechanisms+3
3102 months ago
chromium-exploit-dev preview

chromium-exploit-dev

GitHubpetitoto/chromium-exploit-dev

Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits

binary-exploitationcommand-and-controlexploitation+5
3065 months ago
CloudPrivs preview

CloudPrivs

GitHubabstractclass/cloudprivs

Determine privileges from cloud credentials via brute-force testing.

cloud-securityinformation-gatheringpenetration-testing+2
6926 days ago
CVE-2024-48990-PoC-Testing preview

CVE-2024-48990-PoC-Testing

GitHubpentestfunctions/cve-2024-48990-poc-testing

Testing POC for use cases

educationexploitationlabs-practice+3
261 year ago
CVE-2019-0887 preview

CVE-2019-0887

GitHubt43wiu6/cve-2019-0887

exp for CVE-2019-0887

binary-exploitationexploitationlateral-movement+4
185 years ago
CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit preview

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

GitHubmuyuanlove/cve-2025-6018-cve-2025-6019-privilege-escalation-exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit

binary-exploitationexploitationpenetration-testing+3
126 months ago
Xiaomi-C200-Firmware-Analysis preview

Xiaomi-C200-Firmware-Analysis

GitHubh3xdum/xiaomi-c200-firmware-analysis

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

data-recoveryembedded-systems-securityexploitation+6
118 months ago
CVE-2024-10793 preview

CVE-2024-10793

GitHubmahajian/cve-2024-10793
exploitationpayload-developmentprivilege-escalation+3
21 year ago
redis-exploitation preview

redis-exploitation

GitHubknqyf263/redis-exploitation

CONFIG SET

database-securityeducationexploitation+3
17 years ago
CVE-2021-39273-CVE-2021-39274 preview

CVE-2021-39273-CVE-2021-39274

GitHubnikip72/cve-2021-39273-cve-2021-39274

Two security issues identified in Sn1per v9.0 free version by XeroSecurity

exploitationmisconfigurationpenetration-testing+2
15 years ago
cve-2022-24644 preview

cve-2022-24644

GitHubgar-re/cve-2022-24644
dns-analysisexploitationprivilege-escalation+3
13 years ago
Previous12Next