Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
129 results
autopwn preview

autopwn

GitHubnccgroup/autopwn

Specify targets and run sets of tools against them

penetration-testingpenetration-testing-frameworksreconnaissance+2
3887 years ago
SCMKit preview

SCMKit

GitHubh4wkst3r/scmkit

Source Code Management Attack Toolkit

penetration-testingpersistence-mechanismsprivilege-escalation+2
2293 years ago
paragon preview

paragon

GitHubkcarretto/paragon

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

command-and-controlexploit-frameworkspayload-development+4
3052 years ago
BYOSI preview

BYOSI

GitHuboldkingcone/byosi

Evade EDR's the simple way, by not touching any of the API's they hook.

payload-generationpenetration-testingred-teaming+1
1962 months ago
SQLRecon preview

SQLRecon

GitHubxforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

database-securityexploitationlateral-movement+6
4001 year ago
ADOKit preview

ADOKit

GitHubh4wkst3r/adokit

Modular attack toolkit exploiting Azure DevOps REST API for reconnaissance, privilege escalation, and persistence using stolen cookies or PATs.

cloud-securitypenetration-testingpersistence-mechanisms+3
1541 month ago
chuckle preview

chuckle

GitHubnccgroup/chuckle

An automated SMB relay exploitation script.

exploitationlateral-movementpenetration-testing+3
1529 years ago
nocturne preview

nocturne

GitHubnodiuus/nocturne

A bin2bin code virtualizer for x86-64 PE's

binary-analysisbinary-exploitationexploitation+5
1733 months ago
mjet preview

mjet

GitHubmogwaisec/mjet

Mogwai Java Management Extensions (JMX) Exploitation Toolkit

exploitationexploit-frameworksmisconfiguration+3
17410 years ago
psexec_noinstall preview

psexec_noinstall

GitHubmzhmo/psexec_noinstall

Repository contains psexec, which will help to exploit the forgotten pipe

exploitationmisconfigurationpenetration-testing+3
1731 year ago
Get-RBCD-Threaded preview

Get-RBCD-Threaded

GitHubfatrodzianko/get-rbcd-threaded

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

penetration-testingprivilege-escalationreconnaissance+1
1335 years ago
Prismatica preview

Prismatica

GitHubproject-prismatica/prismatica

Responsive Command and Control System

command-and-controlexploit-frameworkspayload-development+3
1027 years ago
ZeroPulse preview

ZeroPulse

GitHubjxroot/zeropulse

🔒 Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI &…

command-and-controlexploitationlateral-movement+8
1438 months ago
CVE-2026-50522 preview

CVE-2026-50522

GitHub4minx/cve-2026-50522

CVE-2026-50522 PoC

exploitationpayload-generationpenetration-testing+4
4128 days ago
ad-autopwn preview

ad-autopwn

GitHubjonaslejon/ad-autopwn

Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

command-and-controlexploitationlateral-movement+7
5222h 23m ago
backup_dc_registry preview

backup_dc_registry

GitHubhorizon3ai/backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

exploitationlateral-movementmisconfiguration+3
964 years ago
watchTowr-vs-FortiWeb-CVE-2025-25257 preview

watchTowr-vs-FortiWeb-CVE-2025-25257

GitHubwatchtowrlabs/watchtowr-vs-fortiweb-cve-2025-25257

Detection artifact generator for FortiWeb CVE-2025-25257, exploiting unauthenticated SQL injection to achieve remote code execution via hex-encoded…

exploitationpayload-generationpenetration-testing+3
1001 year ago
AttackSurfaceManagement preview

AttackSurfaceManagement

GitHub1n3/attacksurfacemanagement

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam…

exploit-frameworksinformation-gatheringosint+6
1074 years ago
Previous1…345…8Next