Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
50 results
Invoke-PSImage preview

Invoke-PSImage

GitHubpeewpw/invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

command-and-controlpayload-generationred-teaming+1
2.2k
6 years ago
Exe2Image preview

Exe2Image

GitHubosandamalith/exe2image

A simple utility to convert EXE files to JPEG images and vice versa.

data-exfiltrationpayload-generationsteganography
20511 years ago
ExifSmugglingPoC preview

ExifSmugglingPoC

GitHubmalwaretech/exifsmugglingpoc

A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload

data-exfiltrationexploitationpayload-generation+3
669 months ago
Cloak preview

Cloak

GitHubcbeuw/cloak

A censorship circumvention tool to evade detection by authoritarian state adversaries

encryption-decryption-toolsids-ips-evasionnetwork-security+1
4.1k1 year ago
tweetable-polyglot-png preview

tweetable-polyglot-png

GitHubdavidbuchanan314/tweetable-polyglot-png

Pack up to 3MB of data into a tweetable PNG polyglot file.

data-exfiltrationosintsteganography
2.6k5 years ago
openstego preview

openstego

GitHubsyvaidya/openstego

OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within an image file. b)…

digital-forensicsencryption-decryption-toolssteganography
1.4k3 years ago
steganography preview

steganography

GitHub7thsamurai/steganography

Simple C++ Image Steganography tool to encrypt and hide files inside images using Least-Significant-Bit encoding.

cryptographydata-exfiltrationencryption-decryption-tools+1
1.1k2 years ago
PacketWhisper preview

PacketWhisper

GitHubtrycatchhcf/packetwhisper

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with…

cryptographydata-exfiltrationdns-analysis+2
6536 years ago
BobTheSmuggler preview

BobTheSmuggler

GitHubthecyb3ralpha/bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…

educationencryption-decryption-toolspayload-development+4
60010 months ago
EKFiddle preview

EKFiddle

GitHubjeromesegura/ekfiddle

Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

malware-analysisosintpacket-sniffing-analysis+3
6421 year ago
StegoForge preview

StegoForge

GitHubnour833/stegoforge

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

cryptographyctfdata-exfiltration+8
5753 months ago
Matroschka preview

Matroschka

GitHubfbngrm/matroschka

Python steganography tool to hide images or text in images

cryptographyencryption-decryption-toolssteganography
4366 years ago
File-Injector preview

File-Injector

GitHubcarlospuenteg/file-injector

File Injector is a script that allows you to store any file in an image using steganography

cryptographydata-exfiltrationencryption-decryption-tools+1
4443 years ago
IG-Detective preview

IG-Detective

GitHubshredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

educationfingerprint-spoofingforensics+7
1522 days ago
Project-Onyx preview

Project-Onyx

GitHubx-3306/project-onyx

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

ai-securitycommand-and-controlcryptography+6
1181 month ago
Steghide-Brute-Force-Tool preview

Steghide-Brute-Force-Tool

GitHubva5c0/steghide-brute-force-tool

Execute a brute force attack with Steghide to file with hide information and password established

password-attackspenetration-testingsteganography
1235 years ago
Anti-Forensics preview

Anti-Forensics

GitHubashemery/anti-forensics

A Repository to Track Anti-Forensic Techniques

curated-resourcesdigital-forensicseducation+3
1213 years ago
stegowiper preview

stegowiper

GitHubmindcrypt/stegowiper

A powerful and flexible tool to apply active attacks for disrupting stegomalware

defensive-toolsincident-responsemalware-analysis+2
564 years ago
Previous123Next