Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

404 results

cheatengine-mcp-bridge

miscusi-peek/cheatengine-mcp-bridge

Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural…

dynamic-analysis-sandboxingpayload-generationcode-analysis+7

1.2k

2 months ago

CVE-2026-2766-but-with-wasm

sneakynachos/cve-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm

vulnerability-analysisexploitationshellcode+2

12 months ago

CVE-2024-29943-but-with-wasm

sneakynachos/cve-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm

exploitationshellcodeweb-security+1

12 months ago

Fritter

0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

payload-generationexploitationshellcode+5

2482 months ago

shellcode

0xdea/shellcode

A collection of my shellcode samples.

exploitationshellcodepenetration-testing+3

262 months ago

Medusa

mythicagents/medusa

Cross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…

penetration-testing-frameworksprivilege-escalationexploit-frameworks+8

2082 months ago

sgn

egebalci/sgn

Polymorphic binary encoder for offensive security payloads. Encodes shellcode with LFSR-based feedback loop, garbage instruction injection, and…

payload-generationids-ips-evasionshellcode+2

2.0k2 months ago

hackEmbedded

doudoudedi/hackembedded

This tool is used for encrypt backdoor,shellcode,socks5 proxy generation,Information retrieval and POC arrangement for various architecture devices

embedded-systems-securityencryption-decryption-toolsiot-security+8

2072 months ago

RawrXDA

itsmehrawrxd/rawrxda

RawrXDA

exploit-frameworkscode-analysisreverse-engineering+7

62 months ago

phantom-frida

theqmaks/phantom-frida

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

android-securitydynamic-analysis-sandboxingpayload-generation+7

3602 months ago

Supernova

nickvourd/supernova

Multi-cipher shellcode encryptor and obfuscator with automatic output conversion to C, C#, Rust, Nim, Python, and more. Supports ROT, XOR, RC4, AES,…

encryption-decryption-toolsexploit-frameworkspayload-generation+3

1.0k2 months ago

Phantom-Evasion-Loader

jm00nj/phantom-evasion-loader

x64 Assembly injection engine using SROP and Zero-Copy Injection to bypass EDR/XDR and kernel monitors. Delivers XOR-encrypted payloads with minimal…

exploit-frameworksshellcodepost-exploitation+6

1103 months ago

Lucky-Spark

schich/lucky-spark

A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.

exploitationshellcodepost-exploitation+6

583 months ago

msf_shellcode_analysis

yo-yo-yo-jbo/msf_shellcode_analysis

Static analysis walkthrough of a Metasploit Windows shellcode: PowerShell payload decoding, XOR obfuscation, PEB walking, and Export Address Table…

static-analysisreverse-engineeringshellcode+3

283 months ago

SILVERPICK

winterknife/silverpick

Windows User-Mode Shellcode Development Framework (WUMSDF)

exploitationshellcodered-teaming+2

1583 months ago

RustyWater-ShellCode-Dropper

s3n4t0r-0x0/rustywater-shellcode-dropper

RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.

privilege-escalationpersistence-mechanismsexploitation+9

1043 months ago

nimcrypt

chaelsoo/nimcrypt

Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.

encryption-decryption-toolsexploitationids-ips-evasion+6

213 months ago

r77-rootkit

bytecode77/r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

defensive-toolsprivilege-escalationpayload-generation+6

2.2k3 months ago

Previous 1 234…23 Next