Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

125 results

Seatbelt

ghostpack/seatbelt

C# host-survey tool for offensive and defensive security, performing extensive safety checks on Windows systems including user, system, and network…

defensive-toolsinformation-gatheringpenetration-testing+6

4.7k

1 year ago

BloodHound

specterops/bloodhound

Graph-based tool for mapping and analyzing identity and privilege relationships across Active Directory, Azure, and other identity platforms to…

defensive-toolsidentity-access-managementinformation-gathering+4

3.3k1 day ago

postenum

mostaphabahadou/postenum

A lightweight, portable, and modular tool for Linux enumeration and privilege escalation.

information-gatheringpenetration-testingpost-exploitation+1

2957 months ago

TaskHound

1r0bit/taskhound

Tool to enumerate privileged Scheduled Tasks on Remote Systems

information-gatheringlateral-movementpenetration-testing+4

3125 months ago

AD-PathFinder

netspi/ad-pathfinder

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

exploitationinformation-gatheringlateral-movement+7

10116 days ago

DumpGuard

bytewreck/dumpguard

Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.

authenticationexploitationinformation-gathering+6

7323 months ago

CVE-2026-11961

johenlastgen-jlg/cve-2026-11961

Multi-threaded exploit for CVE-2026-11961 in WordPress User Registration; detects vulnerable versions and creates admin accounts, with batch…

exploitationinformation-gatheringmisconfiguration+5

118 days ago

tofu

puckblush/tofu

Windows offline filesystem hacking tool for Linux

exploitationforensicsinformation-gathering+2

984 years ago

LDAPPER

shellster/ldapper

Active Directory LDAP query tool with NTLM authentication, pagination, and pre-built searches for user/group/computer enumeration, Kerberoasting,…

authenticationinformation-gatheringpassword-attacks+3

1141 year ago

LinPwn

andromeda1957/linpwn

Interactive post-exploitation tool for Linux privilege escalation, enumeration, file exfiltration, and credential harvesting via reverse shell.

information-gatheringpassword-crackingpenetration-testing+2

376 years ago

win-exp-

ianxtianxt/win-exp-

Windows vulnerability scanner that detects missing security patches and identifies known exploits and Metasploit modules for privilege escalation.

exploitationinformation-gatheringpenetration-testing+3

1096 years ago

Archived

Watson

rasta-mouse/watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

exploitationinformation-gatheringpenetration-testing+2

1.7k5 years ago

msdat

quentinhardy/msdat

Modular penetration testing tool for Microsoft SQL Server that automates credential discovery, privilege escalation, command execution, and data…

database-securityexploitationinformation-gathering+3

1.0k3 years ago

wmiexec-Pro

xiaolichan/wmiexec-pro

WMI-based Windows remote execution tool for stealthy lateral movement, featuring AMSI bypass, file transfer, RID hijacking, firewall abuse, and event…

information-gatheringlateral-movementpenetration-testing+5

1.3k4 months ago