Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

35 results

SleuthQL

ianxtianxt/sleuthql

SleuthQL是基于python3所开发的一款，用于批量爬行站点可能存在sql的地址。并且可以配合burp+sqlmap进行批量注入。对比sqlmap手动单线程一个一个注入点的去识别，方便了很多。

penetration-testingreconnaissancescripting-automation+4

6 years ago

cuckooautoinstall

buguroo/cuckooautoinstall

Auto Installer Script for Cuckoo Sandbox

dynamic-analysis-sandboxingmalware-analysisscripting-automation+1

1648 years ago

Kali-Setup

raikia/kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

penetration-testingscripting-automationutilities-frameworks

1905 years ago

KaliPackergeManager

halildeniz/kalipackergemanager

Menu-driven bash script for Kali Linux that simplifies package installation across categories like System, Desktop, Tools, and Menu using apt-get…

general-purpose-utilitiesscripting-automationutilities-frameworks

652 years ago

cs-get-last-error

henkru/cs-get-last-error

An aggressor script for Cobalt Strike to query Windows' GetLastError messages

post-exploitationred-teamingutilities-frameworks

183 years ago

OSCP-Exam-Report-Template-Markdown

noraj/oscp-exam-report-template-markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

educationpenetration-testingutilities-frameworks

4.2k11 days ago

Halcyon-IDE

s4n7h0/halcyon-ide

First IDE for Nmap Script (NSE) Development.

network-securityscripting-automationutilities-frameworks+1

3606 years ago

ptf

trustedsec/ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

exploit-frameworkspenetration-testing-frameworksscripting-automation+1

5.6k1 year ago

nlist

nccgroup/nlist

An nmap script to produce target lists for use with various tools.

information-gatheringnetwork-mappingpenetration-testing+2

345 years ago

Archived

LALIN

screetsec/lalin

this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools like lazynmap , install another…

information-gatheringpenetration-testingreconnaissance+3

3829 years ago

Archived

google_socks

lukebaggett/google_socks

A proof of concept demonstrating the use of Google Drive for command and control.

cloud-securitycommand-and-controldata-exfiltration+3

888 years ago

cypherhound

fin3ss3g0d/cypherhound

Your template-based BloodHound terminal companion tool

information-gatheringpenetration-testingreconnaissance+1

4557 months ago

nsearch

jtibaquira/nsearch

minimal script to help find script into the nse database

information-gatheringutilities-frameworksvulnerability-analysis

1298 years ago

bbs

synacktiv/bbs

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of…

network-securitypenetration-testingred-teaming+2

9828 days ago

sidedoor

daradib/sidedoor

SSH connection daemon for Debian/Raspbian/Ubuntu/etc

network-securityremote-access-toolutilities-frameworks

1306 years ago

Wallet-Transaction-Monitor

somethingtotallyrandom/wallet-transaction-monitor

This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions.

cryptographyinformation-gatheringutilities-frameworks

243 years ago

Invisi-Shell

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

defensive-toolsexploitationids-ips-evasion+9

1.3k7 years ago

ulexecve

anvilsecure/ulexecve

Executes arbitrary ELF binaries directly from memory on Linux without touching disk, enabling stealthy red-teaming and anti-forensic operations via a…

exploitationmemory-forensicspenetration-testing+3

2152 years ago

Previous12 Next