Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

70 results

LsassReflectDumping

offensive-panda/lsassreflectdumping

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

memory-forensicspassword-attackspost-exploitation+1

220

1 year ago

Archived

Smersh

matro7sh/smersh

Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions.

penetration-testing

2191 year ago

Graffiti

ekultek/graffiti

A tool to generate obfuscated one liners to aid in penetration testing

payload-developmentpayload-generationpenetration-testing+1

1807 years ago

vthunting

fr0gger/vthunting

Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.

information-gatheringthreat-intelligencevulnerability-analysis

1693 years ago

OverThruster

redlectroid/overthruster

HID attack payload generator for Arduinos

hardware-iot-securitypayload-generationpenetration-testing+1

1652 years ago

DLLHSC

ctxis/dllhsc

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

binary-analysisexploitationpayload-development+1

1576 years ago

IpGeo

z4l4mi/ipgeo

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

information-gatheringnetwork-forensicsosint+1

1323 years ago

Metadata-Attacker

rub-nds/metadata-attacker

A tool to generate media files with malicious metadata

information-gatheringpayload-generationpenetration-testing+1

1287 years ago

godofwar

kingsabri/godofwar

GodOfWar - Malicious Java WAR builder with built-in payloads

exploitationpayload-developmentpayload-generation+3

1257 years ago

URLCADIZ

perezmascato/urlcadiz

A simple script to generate a hidden url for social engineering.

osint-social-engineeringphishing-toolssocial-engineering

1236 years ago

Krb5RoastParser

jalvarezz13/krb5roastparser

KrbRoastParser is a tool for parsing Kerberos packets from pcap files to extract AS-REQ, AS-REP and TGS-REP hashes

authenticationhash-analysisnetwork-security+3

1091 month ago

flowinspect

7h3ram/flowinspect

A Network Inspection Tool

forensicsfuzzingintrusion-detection+5

828 years ago

CSRFER

luisfontes19/csrfer

Tool to generate csrf payloads based on vulnerable requests

payload-generationpenetration-testingweb-application-exploitation

645 years ago

PassMute

hackerinthehouse-official/passmute

CLI password mutation tool applying transformation rules (leet, reverse, case-swap) to generate password variants for security testing and…

password-attackspassword-crackingpenetration-testing

563 years ago

IP-reputation-snort-rule-generator

nccgroup/ip-reputation-snort-rule-generator

A tool to generate Snort rules based on public IP reputation data

dns-analysisids-ips-evasionintrusion-detection+2

5612 years ago

wordreaper

nemorous/wordreaper

📜 Scrape targeted wordlists for password cracking using CSS selectors

crawlerctfinformation-gathering+5

514 months ago

Archived

usernamer

jseidl/usernamer

Pentest Tool to generate usernames/logins based on supplied names.

educationinformation-gatheringpassword-attacks+2

397 years ago

clickjacking-poc

nccgroup/clickjacking-poc

Clickjacking PoC Generator

exploitationpenetration-testingred-teaming+2

365 years ago

Previous 1 234 Next