Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

175 results

GraphSpy

redbyte1337/graphspy

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

authenticationcloud-securitydata-exfiltration+6

1.4k

11 days ago

WSASS

twosevenonet/wsass

This is the tool to dump the LSASS process on modern Windows 11

adversarial-attackexploitationpenetration-testing+2

5973 months ago

PPLcontrol

itm4n/pplcontrol

Windows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.

defensive-toolsexploitationprivilege-escalation+1

4053 years ago

ALPC-Enumerator

talha-nazeef-ahmed/alpc-enumerator

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

digital-forensicsinformation-gatheringmalware-analysis+4

2525 days ago

lsawhisper-bof

dazzyddos/lsawhisper-bof

A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without…

authenticationcommand-and-controlexploitation+4

2986 months ago

PPLFaultDumpBOF

trustedsec/pplfaultdumpbof

Cobalt Strike BOF that exploits a Windows Protected Process Light bypass to dump protected processes, enabling credential access from LSASS.

exploitationpost-exploitationprivilege-escalation+1

1463 years ago

NoArgs

oh-az/noargs

Windows API hooking tool that dynamically spoofs and conceals process arguments via Detours library and PEB manipulation, enabling stealthy process…

api-securitydefensive-toolsred-teaming

1522 years ago

createdump

rweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

impersonation-toolspassword-attackspost-exploitation+1

1491 year ago

gibson

hackinglz/gibson

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

anomaly-detectioncloud-securitydefensive-tools+6

6 months ago

snmp-shell

mxrch/snmp-shell

Shell Simulation over Net-SNMP with extend functionality

command-and-controlexploitationnetwork-security+3

995 years ago

POSTDump

yolop0wn/postdump

C# tool for LSASS minidump with multiple evasion techniques including indirect syscalls, ETW patching, and PPL bypass via driver or WER fault.…

post-exploitationprivilege-escalationred-teaming

3472 months ago

Terminator_Killer

hika-sec/terminator_killer

Kernel-mode process killer exploiting CVE-2026-0828 (BYOVD) to terminate protected processes via a vulnerable signed driver, bypassing PPL and…

exploitationids-ips-evasionpenetration-testing+3

113 days ago

TokenStealer

decoder-it/tokenstealer

Windows token manipulation utility that lists, steals, and impersonates process or user tokens to execute commands as other users, leveraging…

impersonation-toolspost-exploitationprivilege-escalation+1

1662 years ago

KSLDBYOVDARK

anylnk/ksldbyovdark

Exploits a KSLD anti-rootkit driver vulnerability (IOCTL 0x222044) to bypass PPL protection and access sensitive process memory, enabling local…

exploitationpenetration-testingpost-exploitation+3

414 months ago

Archived

invoker

ivan-sincek/invoker

Penetration testing utility and antivirus assessment tool.

binary-analysiseducationexploitation+6

3123 years ago

Archived

Firework

spiderlabs/firework

Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.

authenticationcommand-and-controlosint-social-engineering+5

436 years ago

detection-validation

alwashali/detection-validation

Detection rule validation

adversarial-attackdefensive-toolsintrusion-detection+1

422 years ago

EDR-Freeze

twosevenonet/edr-freeze

EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.

exploitationids-ips-evasionpost-exploitation+1

8673 months ago

Previous12…10 Next