Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
125 results
Chamemask preview

Chamemask

GitHubmanhnho/chamemask

Fake identity generator. 102 countries, one HTML file, no setup.

general-purpose-utilitiesimpersonation-toolsosint-social-engineering+3
2
5 days ago
FullscreenBrowserPhishing preview

FullscreenBrowserPhishing

GitHubgmh5225/fullscreenbrowserphishing

PoC of the phishing through setting browser in the fullscreen mode

educationphishingphishing-tools+3
3 years ago
WEAPONIZING-CVE-2024-4367 preview

WEAPONIZING-CVE-2024-4367

GitHubexfil0/weaponizing-cve-2024-4367

CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the…

educationexploitationpayload-generation+3
31 year ago
PoC-CVE-2026-20841 preview

PoC-CVE-2026-20841

GitHubelenichristopoulou/poc-cve-2026-20841

Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…

exploitationphishingsocial-engineering+1
7 months ago
SpamChannel preview

SpamChannel

GitHubbyt3bl33d3r/spamchannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

email-securityimpersonation-toolsphishing-tools+1
3493 years ago
TeamsNTLMLeak preview

TeamsNTLMLeak

GitHubsoufianetahiri/teamsntlmleak

Leak NTLM via Website tab in teams via MS Office

adversarial-attackexploitationinformation-gathering+4
792 years ago
recaptcha-phish preview

recaptcha-phish

GitHubjohnhammond/recaptcha-phish

Phishing with a fake reCAPTCHA

impersonation-toolspayload-generationphishing-tools+1
6592 years ago
DroppedConnection preview

DroppedConnection

GitHubnccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

impersonation-toolspenetration-testingphishing-tools+2
1293 years ago
RP_RecordClip_DLL_Hijack preview

RP_RecordClip_DLL_Hijack

GitHubedubr2020/rp_recordclip_dll_hijack

Remote DLL hijack exploit for Real Player (CVE-2022-32291) using malicious DLLs from WebDAV/SMB shares to achieve code execution.

binary-exploitationexploitationsocial-engineering
23 years ago
camjacking preview

camjacking

GitHubcappricio-securities/camjacking

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

educationimpersonation-toolsinformation-gathering+5
727 months ago
camjacking-templates preview

camjacking-templates

GitHubcappricio-securities/camjacking-templates

camjacking templates

defensive-toolseducationlabs-practice+3
56 months ago
CVE-2023-52076-PoC preview

CVE-2023-52076-PoC

GitHubgroppoxx/cve-2023-52076-poc

PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB.…

binary-exploitationexploitationpayload-generation+3
32 months ago
phishing-frenzy preview

phishing-frenzy

GitHubpentestgeek/phishing-frenzy

Ruby on Rails Phishing Framework

penetration-testingphishingred-teaming+2
9002 years ago
MITMer preview

MITMer

GitHubhusam212/mitmer

Automated man-in-the-middle attack tool.

dns-analysisnetwork-securitypacket-sniffing-analysis+5
5312 years ago
FaceBrute preview

FaceBrute

GitHubemerinohdz/facebrute

Facebook brute forcer script

authenticationpassword-attackspenetration-testing+2
2814 years ago
PwnSTAR preview

PwnSTAR

GitHubsilverfoxx/pwnstar

PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!

captcha-bypassdns-analysisexploitation+7
26112 years ago
linset preview

linset

GitHubvk496/linset

Evil Twin Attack Bash script

educationphishingred-teaming+3
57812 years ago
androrat preview

androrat

GitHubdesignativedave/androrat

Remote Administration Tool for Android devices

android-securitycommand-and-controldata-exfiltration+9
1.7k13 years ago
Previous1234567Next