Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

355 results

mitm

0x0be/mitm

A simple yet effective python3 script to perform DNS spoofing via ARP poisoning

packet-sniffing-analysis

455 years ago

Boomerang

paranoidninja/boomerang

Agent-server HTTP+TCP tunneling tool for exposing multiple internal services to external networks. Supports multi-level pivoting and SOCKS proxy…

command-and-controllateral-movementpenetration-testing+1

2255 years ago

SharpRelay

pkb1s/sharprelay

C# tool leveraging WinDivert driver to intercept and redirect Windows port 445 traffic for NTLM relay attacks via Cobalt Strike, enabling lateral…

lateral-movementpacket-sniffing-analysispenetration-testing+1

1805 years ago

CVE-2019-1040

ridter/cve-2019-1040

CVE-2019-1040 with Exchange

exploitationlateral-movementpenetration-testing+2

2495 years ago

Potato

foxglovesec/potato

Windows local privilege escalation exploit using NBNS spoofing, fake WPAD proxy, and HTTP-to-SMB NTLM relay to gain NT AUTHORITY\SYSTEM access.

authenticationexploitationlateral-movement+5

7445 years ago

TokenPlayer

s1ckb0y1337/tokenplayer

Manipulating and Abusing Windows Access Tokens.

impersonation-toolslateral-movementpenetration-testing+2

3005 years ago

CVE-2019-0887

t43wiu6/cve-2019-0887

exp for CVE-2019-0887

binary-exploitationexploitationlateral-movement+4

195 years ago

CVE-2020-11652

al1ex/cve-2020-11652

Exploit for SaltStack CVEs (CVE-2020-11651/11652) enabling remote command execution on master/minions, file read/upload, and reverse shell.

command-and-controlexploitationlateral-movement+3

65 years ago

CVE-2020-1472

saharattackit/cve-2020-1472

Exploit for CVE-2020-1472 (Zerologon) targeting Windows Netlogon to achieve privilege escalation and domain controller compromise.

exploitationlateral-movementpenetration-testing+2

5 years ago

smbAutoRelay

cheshireca7/smbautorelay

SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environments.

authenticationexploitationlateral-movement+2

465 years ago

SharpGPOAbuse

reverseclabs/sharpgpoabuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order…

exploitationlateral-movementpenetration-testing+4

1.4k5 years ago

PyLadon

k8gege/pyladon

Ladon Scanner For Python, Large Network Penetration Scanner & Cobalt Strike, vulnerability / exploit / detection /…

command-and-controlexploitationlateral-movement+6

525 years ago

CVE-2020-25265-25266

refi64/cve-2020-25265-25266

Proof-of-concept exploit demonstrating CVE-2020-25265 and CVE-2020-25266, using a crafted MP3 file to achieve arbitrary code execution via…

binary-exploitationexploitationlateral-movement+3

25 years ago

CVE-2020-1472

whippet0/cve-2020-1472

CVE-2020-1472

exploitationlateral-movementpenetration-testing+2

5 years ago

CVE-2020-1472

b1ack0wl/cve-2020-1472

Exploit for CVE-2020-1472 (ZeroLogon) that resets the domain controller account password and enables DCSync for full domain compromise.

exploitationlateral-movementpenetration-testing+3

15 years ago

Py-RDP-Patcher

sp00kyskelet0n/py-rdp-patcher

Python script that patches the termsrv.dll file on Windows to enable multiple concurrent RDP sessions, supporting Windows 10 versions 1703 through…

lateral-movementpenetration-testingremote-access-tool

65 years ago

MiscTools

rasta-mouse/misctools

Miscellaneous Tools

command-and-controllateral-movementpenetration-testing+3

2695 years ago

DVS

scorpioneslabs/dvs

D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects

command-and-controlexploitationlateral-movement+3

2565 years ago

Previous 1…151617…20 Next