Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
655 results
HiveJack preview

HiveJack

GitHubviralmaniar/hivejack

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM,…

lateral-movementpenetration-testingpost-exploitation
1126 years ago
vhosts-sieve preview

vhosts-sieve

GitHubdariusztytko/vhosts-sieve

Searching for virtual hosts among non-resolvable domains

information-gatheringpenetration-testingreconnaissance+2
896 years ago
bing-ip2hosts preview

bing-ip2hosts

GitHuburbanadventurer/bing-ip2hosts

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

crawlerinformation-gatheringosint+3
1405 years ago
pivotnacci preview

pivotnacci

GitHubblackarrowsec/pivotnacci

A tool to make socks connections through HTTP agents

lateral-movementpenetration-testingred-teaming+1
7255 years ago
ligolo preview

ligolo

GitHubsysdream/ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

lateral-movementpenetration-testingred-teaming
1.8k6 years ago
honeyScore preview

honeyScore

GitHubskotizo/honeyscore

Scan a list of IP addresses for honeypots using the Shodan CLI

information-gatheringnetwork-securityreconnaissance
86 years ago
checker-CVE-2020-5902 preview

checker-CVE-2020-5902

GitHubmrcl0wnlab/checker-cve-2020-5902

Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1…

exploitationreconnaissancevulnerability-scanners+1
56 years ago
spybrowse preview

spybrowse

GitHub1d8/spybrowse

Code developed to steal certain browser config files (history, preferences, etc)

data-exfiltrationinformation-gatheringmalware-analysis+2
636 years ago
reconspider preview

reconspider

GitHubbhavsec/reconspider

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

dns-analysisemail-harvestinginformation-gathering+5
2.8k5 years ago
geo-recon preview

geo-recon

GitHubradioactivetobi/geo-recon

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.

information-gatheringosintreconnaissance
4573 years ago
SharpSecDump preview

SharpSecDump

GitHubg0ldengunsec/sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

lateral-movementpenetration-testingpost-exploitation
6136 years ago
nuubi preview

nuubi

GitHubpikpikcu/nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

dns-analysisinformation-gatheringosint+4
866 years ago
unimap preview

unimap

GitHubedu4rdshl/unimap

Scan only once by IP address and reduce scan times with Nmap for large amounts of data.

information-gatheringnetwork-mappingport-scanning+2
4001 month ago
pytmipe preview

pytmipe

GitHubquentinhardy/pytmipe

Python library and client for token manipulations and impersonations for privilege escalation on Windows

impersonation-toolspenetration-testingpost-exploitation+2
1233 years ago
webscan preview

webscan

GitHubsamyk/webscan

Browser-based network scanner & local-IP detection

information-gatheringnetwork-mappingosint+1
4755 years ago
WSMan-WinRM preview

WSMan-WinRM

GitHubbohops/wsman-winrm

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object

lateral-movementpenetration-testingred-teaming+1
2626 years ago
poet preview

poet

GitHubofflinemark/poet

[unmaintained] Post-exploitation tool

command-and-controldata-exfiltrationpayload-generation+4
18110 years ago
WireBug preview

WireBug

GitHubsyss-research/wirebug

WireBug is a toolset for Voice-over-IP penetration testing

authenticationencryption-decryption-toolsfuzzing+3
1774 years ago
Previous1…303132…37Next