Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
21 results
lsarelayx preview

lsarelayx

GitHubccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

authenticationexploitationpassword-attacks+2
5854 years ago
EvilAbigail preview

EvilAbigail

GitHubstrozfriedberg/evilabigail

Automated Linux evil maid attack

exploitationpassword-attackspayload-development+3
43510 years ago
CVE-2023-7028 preview

CVE-2023-7028

GitHubvozec/cve-2023-7028

This repository presents a proof-of-concept of CVE-2023-7028

exploitationpassword-attackspenetration-testing+3
2452 years ago
SharpSpray preview

SharpSpray

GitHubjnqpblc/sharpspray

C# tool for automated password spraying attacks against Active Directory users via LDAP, with configurable delays and password lists, designed for…

authenticationpassword-attackspenetration-testing+1
1957 years ago
combine_harvester preview

combine_harvester

GitHubm3f157o/combine_harvester

Rust in-memory dumper

password-attackspenetration-testingpost-exploitation+1
1093 years ago
chalumeau preview

chalumeau

GitHubcyberstruggle/chalumeau

Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python.

command-and-controlpassword-attackspayload-development+3
1026 years ago
CVE-2021-36394 preview

CVE-2021-36394

GitHubdinhbaouit/cve-2021-36394
exploitationpassword-attackspenetration-testing+3
134 years ago
FakeAuth preview

FakeAuth

GitHubatn1ght/fakeauth

Creates Fake Auth prompt to capture users plaintext passwords

password-attacksphishingred-teaming+1
35 years ago
sleepall preview

sleepall

GitHuboditynet/sleepall

trojan CVE-2024-28085 CVE 28085

command-and-controlexploitationpassword-attacks+2
21 year ago
cve-2023-42820 preview

cve-2023-42820

GitHubstartr4ck/cve-2023-42820

JumpServer

exploitationpassword-attackspenetration-testing+3
22 years ago
CVE-2025-15030 preview

CVE-2025-15030

GitHubnxploited/cve-2025-15030

User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

exploitationpassword-attackspenetration-testing+3
14 months ago
CVE-2016-16113-POC preview

CVE-2016-16113-POC

GitHubd3vn0mi/cve-2016-16113-poc

cve-2016-16113

exploitationpassword-attackspayload-generation+4
17 months ago
Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240 preview

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

GitHub0xdtc/bludit-3.9.2-auth-bruteforce-bypass-cve-2019-17240

Bludit 3.9.2 - Auth Bruteforce Bypass CVE:2019-17240 Refurbish In bash

authenticationexploitationpassword-attacks+3
11 year ago
wp2shell preview

wp2shell

GitHub0xwhoknows/wp2shell

Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes,…

exploitationpassword-attackspenetration-testing+4
11 month ago
mcafee_atd_CVE-2019-3663 preview

mcafee_atd_CVE-2019-3663

GitHubfunoverip/mcafee_atd_cve-2019-3663

McAfee Advanced Threat Defense ATD 4.6.x and earlier - Hardcoded root password

exploitationpassword-attackspenetration-testing+3
16 years ago
credential-attacks-toolkit preview

credential-attacks-toolkit

GitHubamibhai/credential-attacks-toolkit

Complete credential attack suite for authorized security testing — SSH, FTP, Web Login, Bruteforce, Dictionary attacks

password-attackspenetration-testingreconnaissance+1
12 months ago
RocketChat-NoSQLi-Chain-CVE-2021-22911 preview

RocketChat-NoSQLi-Chain-CVE-2021-22911

GitHubtenebrae93/rocketchat-nosqli-chain-cve-2021-22911
exploitationpassword-attackspenetration-testing+3
5 months ago
CVE-2025-14736 preview

CVE-2025-14736

GitHubhyunchiya/cve-2025-14736

Unauthenticated Privilege Escalation to Administrator via Role Form Field

exploitationpassword-attackspenetration-testing+4
7 months ago
Previous12Next