Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
41 results
CVE-2026-75898 preview

CVE-2026-75898

GitHubt3bik/cve-2026-75898

Proof-of-concept for CVE-2026-75898, an SSRF in RAGFlow's Invoke component. Demonstrates the vulnerability with unmodified source, includes E2E…

educationexploitationpapers-research+2
2 days ago
Locksmith preview

Locksmith

GitHubjakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

configuration-auditingdefensive-toolsmisconfiguration+2
1.6k28 days ago
DInvoke_rs preview

DInvoke_rs

GitHubkudaes/dinvoke_rs

Dynamically invoke arbitrary unmanaged code

binary-analysisids-ips-evasionpayload-development+3
3661 month ago
CVE-2025-48827 preview

CVE-2025-48827

GitHubsh4den/cve-2025-48827

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin…

authenticationeducationexploitation+3
12 months ago
Invoke-BadSuccessor.ps1 preview

Invoke-BadSuccessor.ps1

GitHubb5null/invoke-badsuccessor.ps1

PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)

authenticationexploitationpenetration-testing+4
472 months ago
Invoke-ADEnum preview

Invoke-ADEnum

GitHubleo4j/invoke-adenum

Automated Active Directory auditing and enumeration tool that generates detailed HTML audit reports with CSV/XLSX export, designed for security…

configuration-auditinginformation-gatheringpenetration-testing+2
5392 months ago
Outpacket preview

Outpacket

GitHubn00py/outpacket

This cheatsheet maps common impacket workflows to their modern alternatives

authenticationcurated-resourceseducation+6
3033 months ago
stealth_call preview

stealth_call

GitHubshare-devn/stealth_call

Header-only Windows x64 indirect syscall library. Zero CRT, zero IAT, VEH anti-BP, AMSI/ETW bypass, W^X memory, per-call dynamic stubs.

exploitationids-ips-evasionmemory-forensics+5
74 months ago
CLSIDFinder preview

CLSIDFinder

GitHub0xqn/clsidfinder

PowerShell enumeration script for discovering service-backed COM objects via CLSID/AppID correlation and activation testing.

information-gatheringlateral-movementpenetration-testing+3
36 months ago
CVE-2025-7771 preview

CVE-2025-7771

GitHubgabriel-lacorte/cve-2025-7771

Arbitrary Function Call Exploit using the ThrottleStop driver

binary-exploitationexploitationprivilege-escalation+2
126 months ago
SharpEDRChecker preview

SharpEDRChecker

GitHubpwndexter/sharpedrchecker

C# tool that enumerates running processes, loaded DLLs, installed services, and drivers to detect the presence of AV, EDR, and logging products,…

defensive-toolsinformation-gatheringpenetration-testing+2
7556 months ago
Invoke-ArgFuscator preview

Invoke-ArgFuscator

GitHubwietze/invoke-argfuscator

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native…

curated-resourcesids-ips-evasionpayload-generation+2
2806 months ago
CVE-2025-54100 preview

CVE-2025-54100

GitHubxiaolvchen/cve-2025-54100

CVE-2025-54100(PowerShell 远程代码执行漏洞)

educationexploitationpayload-development+3
17 months ago
Invoke-Transfer preview

Invoke-Transfer

GitHubjoelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…

data-exfiltrationosintpenetration-testing+2
738 months ago
CVE-2025-53691 preview

CVE-2025-53691

GitHubblueisbeautiful/cve-2025-53691

Remote code execution (RCE) through insecure deserialization

exploitationpayload-developmentpenetration-testing+2
0 years ago
CVE-2024-4577 preview

CVE-2024-4577

GitHubianthinus/cve-2024-4577

Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.

code-analysisexploitationpayload-generation+3
1 year ago
CVE-2020-36708 preview

CVE-2020-36708

GitHubb1g-b33f/cve-2020-36708

Proof of concept for CVE-2020-36708

educationexploitationpenetration-testing+2
21 year ago
Invoke-Stealth preview

Invoke-Stealth

GitHubjoelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

payload-generationpenetration-testingred-teaming+2
5961 year ago
Previous123Next