Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
355 results
clrinject preview

clrinject

GitHubjonatan1024/clrinject

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.

exploitationlateral-movementpenetration-testing+3
237
7 years ago
CVE-2018-8581 preview

CVE-2018-8581

GitHubwyatu/cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

email-securityexploitationlateral-movement+4
3317 years ago
Invoke-TheHash preview

Invoke-TheHash

GitHubkevin-robertson/invoke-thehash

PowerShell Pass The Hash Utils

authenticationlateral-movementnetwork-security+3
1.8k7 years ago
DCOMrade preview

DCOMrade

GitHubsud0woodo/dcomrade

Powershell script for enumerating vulnerable DCOM Applications

lateral-movementpenetration-testingpost-exploitation+2
2647 years ago
Internal-Monologue preview

Internal-Monologue

GitHubeladshamir/internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

lateral-movementpassword-attackspenetration-testing+2
1.7k7 years ago
pentestkoala preview

pentestkoala

GitHubmrschyte/pentestkoala

Modified dropbear server which acts as a client and allows authless login

data-exfiltrationlateral-movementpenetration-testing+3
1258 years ago
injection preview

injection

GitHubjymcheong/injection

Windows process injection methods

binary-exploitationexploitationlateral-movement+3
98 years ago
shARP preview

shARP

GitHubeuropa502/sharp

An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.

defensive-toolsids-ips-evasionnetwork-security+1
1728 years ago
Hack-Captive-Portal preview
Archived

Hack-Captive-Portal

GitHubpriyankvadaliya/hack-captive-portal

This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and…

authenticationimpersonation-toolsnetwork-access-control+2
328 years ago
WHP preview

WHP

GitHub51x/whp

Micro$oft Windows Hacking Pack

exploitationlateral-movementpassword-cracking+5
5268 years ago
caldera-agent preview
Archived

caldera-agent

GitHubmitre/caldera-agent

Windows service agent for CALDERA adversary emulation platform. Installed on target computers to communicate with the CALDERA server, enabling…

command-and-controllateral-movementpayload-generation+3
208 years ago
ranger preview

ranger

GitHubfunkandwagnalls/ranger

A tool for security professionals to access and interact with remote Microsoft Windows based systems.

command-and-controlexploitationlateral-movement+3
4318 years ago
arp-validator preview

arp-validator

GitHubrnehra01/arp-validator

Security Tool to detect arp poisoning attacks

defensive-toolsintrusion-detectionnetwork-security+1
548 years ago
CVE-2017-8464-EXP preview

CVE-2017-8464-EXP

GitHubxssfile/cve-2017-8464-exp

Exploit for CVE-2017-8464 LNK remote code execution vulnerability. Generates malicious .lnk files for USB-based payload delivery, supporting x86 and…

exploitationlateral-movementpayload-generation+3
18 years ago
GoAT preview

GoAT

GitHubpetercunha/goat

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

command-and-controlexploitationlateral-movement+7
2619 years ago
DNSSpoof preview

DNSSpoof

GitHubdtrecherel/dnsspoof

A DNS spoofer tool written in Python3.

adversarial-attackexploitationimpersonation-tools+3
69 years ago
chuckle preview

chuckle

GitHubnccgroup/chuckle

An automated SMB relay exploitation script.

exploitationlateral-movementpenetration-testing+3
1529 years ago
PasteZort preview

PasteZort

GitHubzettahack/pastezort

Pastejacking - PasteZort

impersonation-toolsphishing-toolssocial-engineering+1
8410 years ago
Previous1…181920Next