Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
76 results
hashcat preview

hashcat

GitHubhashcat/hashcat

World's fastest and most advanced password recovery utility

cryptographyencryption-decryption-toolshash-analysis+1
26.6k0 days ago
SecLists preview

SecLists

GitHubdanielmiessler/seclists

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

curated-resourcesfuzzingpassword-cracking+3
73.0k0 days ago
Minimalistic-offensive-security-tools preview

Minimalistic-offensive-security-tools

GitHubinfosecmatter/minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

password-attackspenetration-testingport-scanning
5985 years ago
lsarelayx preview

lsarelayx

GitHubccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

authenticationexploitationpassword-attacks+2
5854 years ago
ThievingFox preview

ThievingFox

GitHubslowerzs/thievingfox
lateral-movementpenetration-testingpost-exploitation+1
5712 years ago
Credential-Hunting preview

Credential-Hunting

GitHubnecr00/credential-hunting

CredsHunter - Credential Hunting scripts for Windows and Linux OS

forensicsincident-responseinformation-gathering+7
1752 days ago
FaceBrute preview

FaceBrute

GitHubemerinohdz/facebrute

Facebook brute forcer script

authenticationpassword-attackspenetration-testing+2
2714 years ago
Probable-Wordlists preview

Probable-Wordlists

GitHubberzerk0/probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

curated-resourceseducationpassword-attacks+1
9.3k6 years ago
DefaultCreds-cheat-sheet preview

DefaultCreds-cheat-sheet

GitHubihebski/defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

curated-resourcesdefensive-toolseducation+6
6.7k1 month ago
cupp preview

cupp

GitHubmebus/cupp

Interactive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…

information-gatheringosintpassword-attacks+1
6.5k1 month ago
scan4all preview

scan4all

GitHubghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dns-subdomain-enumerationexploit-frameworksfuzzing+9
6.2k2 years ago
Pwdb-Public preview

Pwdb-Public

GitHubignis-sec/pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

curated-resourcespassword-attackspassword-cracking
3.3k6 years ago
hacktronian preview

hacktronian

GitHubthehackingsage/hacktronian

Tools for Pentesting

exploitationinformation-gatheringpassword-attacks+4
2.2k4 years ago
DonPAPI preview

DonPAPI

GitHublogin-securite/donpapi

Automated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…

authenticationinformation-gatheringpassword-cracking+3
1.4k1 year ago
TREVORspray preview

TREVORspray

GitHubblacklanternsecurity/trevorspray

Modular password sprayer with SSH proxy rotation, MFA bypass, and domain recon. Supports O365, ADFS, OWA, Okta, Cisco VPN. Automates credential…

waf-bypass
1.4k3 months ago
Creds preview

Creds

GitHubs3cur3th1ssh1t/creds

Some usefull Scripts and Executables for Pentest & Forensics

digital-forensicspassword-attackspenetration-testing+1
1.2k10 days ago
awesome-password-cracking preview

awesome-password-cracking

GitHubn0kovo/awesome-password-cracking

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

curated-resourceseducationhash-analysis+3
1.1k29 days ago
hashes preview

hashes

GitHubspaze/hashes

Magic hashes – PHP hash "collisions"

cryptographycurated-resourceseducation+3
8341 year ago
Previous12345Next