Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
367 results
Spray365 preview
Archived

Spray365

GitHubmarkoh17/spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

authenticationcloud-securityids-ips-evasion+3
381
1 year ago
ezXSS preview

ezXSS

GitHubssl/ezxss

Blind XSS detection and exploitation platform with persistent sessions, reverse proxy, and automated information gathering for penetration testers…

information-gatheringpayload-generationpenetration-testing+2
2.3k3 months ago
CVE-2019-11510 preview

CVE-2019-11510

GitHubprojectzeroindia/cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

exploitationinformation-gatheringpenetration-testing+3
3607 years ago
FUCK-CDN preview

FUCK-CDN

GitHub0xshe/fuck-cdn

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

dns-analysisdns-subdomain-enumerationinformation-gathering+9
1693 months ago
Multi-threaded-mass-exploiter-CVE-2018-13379-POC preview

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

GitHubinstructor-admin/multi-threaded-mass-exploiter-cve-2018-13379-poc

CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit…

exploitationinformation-gatheringpassword-attacks+4
15 months ago
pwncat preview

pwncat

GitHubcalebstewart/pwncat

Post-exploitation platform automating enumeration, privilege escalation, persistence, and C2 operations via reverse/bind shells with cross-platform…

command-and-controlpenetration-testingpersistence-mechanisms+3
2.9k4 years ago
onedrive_user_enum preview

onedrive_user_enum

GitHubnyxgeek/onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

cloud-securityinformation-gatheringosint+3
7641 year ago
Nerv0usR4bbit preview

Nerv0usR4bbit

GitHub34zy/nerv0usr4bbit

Nerv0us r4bbit - Post Exploitation Windows Enumeration Tool

information-gatheringlateral-movementpenetration-testing+3
43 years ago
Awesome-RedTeam-Cheatsheet preview

Awesome-RedTeam-Cheatsheet

GitHubristbs/awesome-redteam-cheatsheet

Red Team Cheatsheet in constant expansion.

curated-resourceseducationlateral-movement+4
1.3k3 years ago
PEASS-ng preview

PEASS-ng

GitHubpeass-ng/peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

educationexploitationexploit-frameworks+7
20.3k10h 4m ago
RedTeam-Tools preview

RedTeam-Tools

GitHuba-poc/redteam-tools

Tools and Techniques for Red Team / Penetration Testing

exploitationlateral-movementosint+7
9.6k6 months ago
A-Red-Teamer-diaries preview

A-Red-Teamer-diaries

GitHubihebski/a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

curated-resourceseducationexploitation+7
1.9k1 year ago
RootHelper preview

RootHelper

GitHubnullarray/roothelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

exploitationinformation-gatheringpayload-generation+6
5055 years ago
PowerShell-Red-Team preview

PowerShell-Red-Team

GitHubtobor88/powershell-red-team

Collection of PowerShell functions a Red Teamer may use in an engagement

information-gatheringlateral-movementpassword-attacks+3
5512 years ago
Credential-Hunting preview

Credential-Hunting

GitHubnecr00/credential-hunting

CredsHunter - Credential Hunting scripts for Windows and Linux OS

forensicsincident-responseinformation-gathering+7
1692 months ago
sopa preview

sopa

GitHubmacmod/sopa

A practical client for ADWS in Golang.

authenticationinformation-gatheringpenetration-testing+3
552 months ago
PyADRecon preview

PyADRecon

GitHubl4rm4nd/pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX +…

authenticationinformation-gatheringpenetration-testing+4
673 months ago
ultrasploiter preview

ultrasploiter

GitLabvqkro/ultrasploiter

A single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…

command-and-controlexploitationexploit-frameworks+9
22 days ago
Previous12…21Next