Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

81 results

Ghostfuscator

alberties/ghostfuscator

The Python Password-Protected Obfuscator

encryption-decryption-toolspayload-generationshellcode-generation

327 years ago

bin2shell

touhidshaikh/bin2shell

bin2shell is very small utils for extract shell code from the binary file

exploitationpayload-developmentpayload-generation+3

129 years ago

MetasploitMCP

gh05tcrew/metasploitmcp

MCP Server for Metasploit

command-and-controlexploitationexploit-frameworks+8

7277 months ago

ThreadlessInject

ccob/threadlessinject

Threadless Process Injection using remote function hooking.

adversarial-attackpayload-developmentpayload-generation+4

8242 years ago

LittleCorporal

connormcgarr/littlecorporal

LittleCorporal: A C# Automated Maldoc Generator

code-analysisdynamic-analysis-sandboxingexploitation+7

2275 years ago

MsfMania

lepotekil/msfmania

Python AV Evasion Tools

binary-analysiseducationencryption-decryption-tools+9

51711 months ago

ASLRay

cryptolok/aslray

Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying

binary-exploitationexploitationexploit-frameworks+4

3103 years ago

nim-loader

adamsvoboda/nim-loader

WIP shellcode loader in nim with EDR evasion techniques

educationexploitationpayload-development+3

2164 years ago

byvalver

umpolungfish/byvalver

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

binary-analysisexploitationmachine-learning+6

636 months ago

staged-DLL-Injection-SMB-

kasturixbm5/staged-dll-injection-smb-

Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification study (CRTO).

educationexploitationlabs-practice+5

423 months ago

CVE-2021-35211

bishopfox/cve-2021-35211

Python exploit for Serv-U SSH vulnerability (CVE-2021-35211) with multiple payload modes: stage, exec, and download-execute, enabling shellcode…

binary-exploitationexploitationexploit-frameworks+6

394 years ago

CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

ac8999/cve-2009-3999-hp-power-manager-4.2-build-7-buffer-overflow

Automatic script written in python for CVE-2009-3999

binary-exploitationeducationexploitation+6

34 months ago

CVE-2008-4654

hexastrike/cve-2008-4654

A fully functional exploit for a stack-based buffer overflow vulnerability in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files.

binary-exploitationexploitationpayload-development+3

1 year ago

xeca

postrequest/xeca

PowerShell payload generator

command-and-controlctfexploitation+6

1204 years ago

KeeFarceReborn

d3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

data-exfiltrationpassword-attackspayload-generation+3

2993 years ago

Neo

stillbigjosh/neo

The NeoC2 Framework

command-and-controlexploit-frameworksids-ips-evasion+8

3717 days ago

Archived

Havoc

havocframework/havoc

The Havoc Framework

command-and-controlexploit-frameworkspayload-generation+5

8.5k9 months ago

anamnesis-release

seanheelan/anamnesis-release

Evaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…

ai-securitybinary-exploitationeducation+9

6347 months ago

Previous 1 2 345 Next