Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
97 results
apkstudio preview

apkstudio

GitHubvaibhavpandeyvpz/apkstudio

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code…

android-securitybinary-analysisdebuggers+5
4.6k
7 months ago
lsarelayx preview

lsarelayx

GitHubccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

authenticationexploitationpassword-attacks+2
5864 years ago
forbidden preview

forbidden

GitHubivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

fuzzingids-ips-evasioninformation-gathering+5
25711 months ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.4k1 day ago
unicorn preview

unicorn

GitHubunicorn-engine/unicorn

Multi-architecture CPU emulation framework for dynamic binary analysis, reverse engineering, and fuzzing. Supports ARM, x86, MIPS, and more via JIT…

ai-assisted-reversingbinary-analysisbinary-exploitation+7
9.3k6 months ago
retdec preview

retdec

GitHubavast/retdec

Retargetable machine-code decompiler based on LLVM that translates executable binaries (ELF, PE, Mach-O) into C or Python-like high-level code with…

binary-analysismalware-analysisreverse-engineering+1
8.6k3 months ago
AhMyth-Android-RAT preview
Archived

AhMyth-Android-RAT

GitHubahmyth/ahmyth-android-rat

Electron-based Android RAT with server-side control panel and client-side backdoor APK generator for remote device administration and penetration…

android-securitycommand-and-controlpayload-generation+3
5.3k5 years ago
wesng preview

wesng

GitHubbitsadmin/wesng

Windows Exploit Suggester - Next Generation

exploitationinformation-gatheringprivilege-escalation+1
4.9k4 days ago
betwixt preview

betwixt

GitHubkdzwinel/betwixt

:zap: Web Debugging Proxy based on Chrome DevTools Network panel.

debuggerspacket-sniffing-analysisweb-proxies-interception+1
4.6k7 years ago
honggfuzz preview

honggfuzz

GitHubgoogle/honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

dns-fuzzingdynamic-code-analysisfuzzing+1
3.4k2 months ago
GodPotato preview

GodPotato

GitHubbeichendream/godpotato

DCOM-based privilege escalation tool for Windows Server 2012-2022 and Windows 8-11, elevating users with ImpersonatePrivilege to NT AUTHORITY\SYSTEM…

exploitationpenetration-testingpost-exploitation+1
2.3k2 years ago
CVE-2021-40444 preview

CVE-2021-40444

GitHublockedbyte/cve-2021-40444

Generates malicious DOCX documents exploiting CVE-2021-40444 (Microsoft Office RCE) with a hosted server for DLL payload delivery, based on…

exploitationmalware-analysispayload-generation+1
1.8k4 years ago
wtf preview

wtf

GitHub0vercl0k/wtf

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

binary-analysisdynamic-analysis-sandboxingexploitation+2
1.8k1 day ago
bypass-firewalls-by-DNS-history preview

bypass-firewalls-by-DNS-history

GitHubvincentcox/bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that…

dns-analysispenetration-testingreconnaissance+2
1.3k5 years ago
Androl4b preview

Androl4b

GitHubsh4hin/androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

android-securityeducationlabs-practice+4
1.2k6 years ago
PSPKIAudit preview

PSPKIAudit

GitHubghostpack/pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

penetration-testingprivilege-escalation
9432 years ago
fence preview

fence

GitHubfencesandbox/fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

container-securitydefensive-toolsdevsecops+5
9336 days ago
WMImplant preview

WMImplant

GitHubredsiege/wmimplant

PowerShell-based RAT using WMI for remote command execution, lateral movement, and C2 communication. Enables file operations, process management,…

command-and-controlinformation-gatheringlateral-movement+3
8652 years ago
Previous123456Next