Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

296 results

RemoteTLSCallbackInjection

maldev-academy/remotetlscallbackinjection

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

binary-exploitationeducationlabs-practice+1

291

2 years ago

DllNotificationInjection

dec0ne/dllnotificationinjection

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote…

exploitationred-teamingshellcode

4713 years ago

metasm

jjyg/metasm

This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby

binary-analysiscode-analysisdebuggers+2

4765 months ago

redpill

r00t-3xp10it/redpill

Assist reverse tcp shells in post-exploration tasks

defensive-toolsinformation-gatheringlateral-movement+6

21810 months ago

CVE-2017-11882

rip1s/cve-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

binary-exploitationexploitationpayload-generation+4

3318 years ago

CVE-2019-18935

noperator/cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

command-and-controlexploitationpayload-development+5

3744 years ago

NovaLdr

blacksnufkin/novaldr

Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)

code-analysiseducationexploitation+7

2672 years ago

acheron

f1zm0/acheron

indirect syscalls for AV/EDR evasion in Go assembly

payload-developmentred-teamingshellcode

3913 years ago

Graffiti

ekultek/graffiti

A tool to generate obfuscated one liners to aid in penetration testing

payload-developmentpayload-generationpenetration-testing+1

1807 years ago

D1rkLdr

saadahla/d1rkldr

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall…

ids-ips-evasionpayload-developmentred-teaming+1

3233 years ago

LiquidSnake

riccardoancarani/liquidsnake

Fileless lateral movement tool using WMI Event Subscriptions to execute .NET assemblies in memory, with shellcode injection via named pipes for…

lateral-movementpayload-generationred-teaming+1

3495 years ago

nim-loader

adamsvoboda/nim-loader

WIP shellcode loader in nim with EDR evasion techniques

educationexploitationpayload-development+3

2174 years ago

ByteCaster

print3m/bytecaster

Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)! ☢️

encryption-decryption-toolspayload-developmentred-teaming+1

2305 months ago

DataInject-BOF

iilegacyyii/datainject-bof

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

binary-exploitationexploitationpayload-development+3

1551 year ago

BOF_ExecuteAssembly

ntdallas/bof_executeassembly

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

binary-exploitationcommand-and-controlids-ips-evasion+4

1988 months ago

sploit

zznop/sploit

Go package that aids in binary analysis and exploitation

binary-analysisbinary-exploitationctf+6

1805 years ago

RustyWater-ShellCode-Dropper

s3n4t0r-0x0/rustywater-shellcode-dropper

RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.

binary-exploitationcommand-and-controlexploitation+9

1061 month ago

VectoredOverloading

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

binary-exploitationexploitationmalware-analysis+6

1278 months ago

Previous 123…17 Next