Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
427 results
blenny preview

blenny

GitHubfrank2/blenny

A payload delivery system which embeds payloads in an executable's icon file!

adversarial-attackpayload-developmentpayload-generation+2
74
2 years ago
Zerologon-Attack-CVE-2020-1472-POC preview

Zerologon-Attack-CVE-2020-1472-POC

GitHubwhoami-chmod777/zerologon-attack-cve-2020-1472-poc

Python exploit for CVE-2020-1472 (Zerologon) that changes a domain controller's machine account password, enabling DCSync and full domain compromise.…

exploitationpayload-developmentpenetration-testing+3
22 years ago
Mystikal preview

Mystikal

GitHubd00mfist/mystikal

macOS Initial Access Payload Generator

adversarial-attackcommand-and-controlpayload-development+4
3262 years ago
Offensive-Rust preview

Offensive-Rust

GitHubwinsecurity/offensive-rust
exploitationpayload-developmentpenetration-testing+2
3022 years ago
GhostDriver preview

GhostDriver

GitHubblacksnufkin/ghostdriver

yet another AV killer tool using BYOVD

defensive-toolsexploitationids-ips-evasion+4
3142 years ago
CVE-2023-4911 preview

CVE-2023-4911

GitHubguffre/cve-2023-4911

Python-based proof-of-concept exploit for CVE-2023-4911 (Looney Tunables) targeting glibc dynamic loader's parse_tunables() for local privilege…

binary-exploitationexploitationpayload-development+3
2 years ago
PoolParty preview

PoolParty

GitHubsafebreach-labs/poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

exploitationpayload-developmentpost-exploitation+3
1.3k2 years ago
CS_COFFLoader preview

CS_COFFLoader

GitHubtrustedsec/cs_coffloader
command-and-controlpayload-developmentpenetration-testing+2
1372 years ago
Ekko preview
Archived

Ekko

GitHubcracked5pider/ekko

Sleep Obfuscation

payload-developmentpost-exploitationred-teaming
8452 years ago
CoffeeLdr preview
Archived

CoffeeLdr

GitHubcracked5pider/coffeeldr

Beacon Object File Loader

command-and-controlpayload-developmentpenetration-testing+2
2932 years ago
CVE-2023-34468 preview

CVE-2023-34468

GitHubmbadanoiu/cve-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi

exploitationpayload-developmentpenetration-testing+3
82 years ago
pyobfuscate preview

pyobfuscate

GitHubmachine1337/pyobfuscate

A simple and efficent script to obfuscate python payloads to make it completely FUD

exploitationmalware-analysispayload-development+2
392 years ago
CoercedPotatoRDLL preview

CoercedPotatoRDLL

GitHubsokarepo/coercedpotatordll

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

exploitationpayload-developmentpenetration-testing+4
2262 years ago
fudcrypt preview

fudcrypt

GitHubmachine1337/fudcrypt

Python-based crypter that obfuscates payloads to bypass antivirus and EDR, generating FUD stubs for red team operations.

exploitationmalware-analysispayload-development+2
222 years ago
qu1ckdr0p2 preview

qu1ckdr0p2

GitHubbyinarie/qu1ckdr0p2

Quicky serve files over http or https using flask.

payload-developmentpayload-generationpenetration-testing+3
352 years ago
the-backdoor-factory preview

the-backdoor-factory

GitHubsecretsquirrel/the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

binary-exploitationexploitationmalware-analysis+6
3.4k2 years ago
Aladdin preview

Aladdin

GitHubnettitude/aladdin

Generates initial access payloads abusing AddInProcess.exe via .NET deserialization, supporting HTA, VBA, JS, and CHM templates for in-memory code…

exploitationpayload-developmentpayload-generation+1
2242 years ago
Fiber preview

Fiber

GitHubkudaes/fiber

Rust-based PoC using Windows fibers to execute in-memory code stealthily, hiding payload stacks from EDR by switching between control and payload…

payload-developmentpost-exploitationred-teaming
2452 years ago
Previous1…111213…24Next