Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
64 results
shellerator preview

shellerator

GitHubshutdownrepo/shellerator

Simple CLI tool for the generation of bind and reverse shells in multiple languages

payload-generationpenetration-testingred-teaming+1
394
2 months ago
DNS_Tunneling preview

DNS_Tunneling

GitHuboctoberfest7/dns_tunneling

DNS tunneling tool using PowerShell and Nslookup to exfiltrate data and deliver payloads via DNS TXT/MX records, bypassing Constrained Language Mode…

command-and-controldata-exfiltrationdns-analysis+3
2324 years ago
PyHook preview

PyHook

GitHubilankalendarov/pyhook

Offensive API hooking tool using Frida to intercept Windows API calls and capture credentials from processes like mstsc, runas, PowerShell, cmd,…

red-teaming
1912 years ago
invoke-antivm preview

invoke-antivm

GitHubrobomotic/invoke-antivm

powershell tool for VM evasion

educationids-ips-evasioninformation-gathering+2
405 years ago
MouseServer-1.7.8.5-RCE preview

MouseServer-1.7.8.5-RCE

GitHubmermehr/mouseserver-1.7.8.5-rce

PoC exploit for CVE-2022-3218 targeting WiFi Mouse Server 1.7.8.5, achieving RCE via keystroke injection and in-memory PowerShell payload delivery…

exploitationpayload-developmentpenetration-testing+2
5 days ago
Salsa-tools preview

Salsa-tools

GitHubhackplayers/salsa-tools

Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

command-and-controlencryption-decryption-toolsexploitation+7
5876 years ago
CcmMessagingBackdoor preview

CcmMessagingBackdoor

GitHubsynacktiv/ccmmessagingbackdoor
command-and-controlpayload-developmentpersistence-mechanisms+3
191 year ago
SessionGopher preview

SessionGopher

GitHubarvanaghi/sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY,…

information-gatheringlateral-movementpenetration-testing+3
1.3k3 years ago
nopowershell preview

nopowershell

GitHubbitsadmin/nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

command-and-controlinformation-gatheringpost-exploitation+2
1.1k9 months ago
nimrm preview

nimrm

GitHubblue0x1/nimrm

Native Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting

authenticationcommand-and-controlinformation-gathering+6
51 month ago
Hacknetics preview

Hacknetics

GitHubice-wzl/hacknetics

Contained is all my reference material for my OSCP / Red Teaming. Designed to be a one stop shop for code, guides, command syntax, and high level…

curated-resourceseducationlearning-paths-courses+3
11117 days ago
BYOSI preview

BYOSI

GitHuboldkingcone/byosi

Evade EDR's the simple way, by not touching any of the API's they hook.

payload-generationpenetration-testingred-teaming+1
1951 month ago
PowerExfil preview

PowerExfil

GitHub1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

data-exfiltrationdns-analysiseducation+3
966 years ago
adPEAS preview

adPEAS

GitHub61106960/adpeas

Powershell tool to automate Active Directory enumeration.

authenticationexploitationinformation-gathering+6
1.4k23 days ago
cheatsheets preview

cheatsheets

GitHubr1cksec/cheatsheets

Collection of knowledge about information security

curated-resourceseducationexploitation+4
69315 days ago
Invoke-WCMDump preview

Invoke-WCMDump

GitHubpeewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

information-gatheringpassword-crackingpenetration-testing+2
7338 years ago
RedRabbit preview

RedRabbit

GitHubsecurethelogs/redrabbit

Red Team PowerShell Script

information-gatheringlateral-movementpenetration-testing+4
3373 years ago
PowerLurk preview

PowerLurk

GitHubsw4mpf0x/powerlurk

Malicious WMI Events using PowerShell

information-gatheringpayload-generationpenetration-testing+5
39810 years ago
Previous1234Next