Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
355 results
WHP preview

WHP

GitHub51x/whp

Micro$oft Windows Hacking Pack

exploitationlateral-movementpassword-cracking+5
5268 years ago
pyGPOAbuse preview

pyGPOAbuse

GitHubhackndo/pygpoabuse

Partial python implementation of SharpGPOAbuse

exploitationlateral-movementpenetration-testing+2
5953 months ago
StandIn preview

StandIn

GitHubfuzzysecurity/standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

dns-analysisexploitationlateral-movement+3
8754 years ago
CVE-2018-8581 preview

CVE-2018-8581

GitHubwyatu/cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

email-securityexploitationlateral-movement+4
3317 years ago
DCOMUploadExec preview

DCOMUploadExec

GitHubdeepinstinct/dcomuploadexec

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

exploitationlateral-movementpayload-development+3
3961 year ago
PetitPotato preview

PetitPotato

GitHubwh0amitz/petitpotato

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

exploitationimpersonation-toolspenetration-testing+3
4643 years ago
dcomhijack preview

dcomhijack

GitHubwkl-sec/dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

exploitationlateral-movementpayload-development+3
3263 years ago
CVE-2019-1040 preview

CVE-2019-1040

GitHubridter/cve-2019-1040

CVE-2019-1040 with Exchange

exploitationlateral-movementpenetration-testing+2
2495 years ago
SQLRecon preview

SQLRecon

GitHubxforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

database-securityexploitationlateral-movement+6
3991 year ago
clrinject preview

clrinject

GitHubjonatan1024/clrinject

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.

exploitationlateral-movementpenetration-testing+3
2377 years ago
DLHell preview

DLHell

GitHubsynacktiv/dlhell

Local & remote Windows DLL Proxying

exploitationlateral-movementpayload-development+3
1712 years ago
acltoolkit preview

acltoolkit

GitHubzblurx/acltoolkit

Active Directory ACL abuse toolkit for privilege escalation, DCSync, object ownership modification, and lateral movement via logon script…

exploitationlateral-movementpenetration-testing+2
1293 years ago
impersonate-rs preview

impersonate-rs

GitHubzblurx/impersonate-rs

Rusty Impersonate

exploitationimpersonation-toolslateral-movement+4
10611 months ago
scour preview

scour

GitHubgrines/scour

Module-based AWS exploitation framework for red team testing and blue team analysis. Emulates attack patterns in the AWS control plane with unique UA…

cloud-securityexploitationlateral-movement+4
1272 years ago
EventLogin-CVE-2025-29969 preview

EventLogin-CVE-2025-29969

GitHubsafebreach-labs/eventlogin-cve-2025-29969

Exploitation of CVE-2025-29969

exploitationlateral-movementpenetration-testing+3
687 months ago
mssql-command-tool preview

mssql-command-tool

GitHubjas502n/mssql-command-tool

mssql 终端连接工具|命令执行

database-securityexploitationlateral-movement+3
406 years ago
Invoke-sAMSpoofing preview

Invoke-sAMSpoofing

GitHubxiaolichan/invoke-samspoofing

CVE-2021-42287/CVE-2021-42278 exploits in powershell

exploitationlateral-movementpayload-development+3
394 years ago
CVE-2025-50505 preview

CVE-2025-50505

GitHuba0yami/cve-2025-50505

Exploit for CVE-2025-50505 in Clash Verge Rev, demonstrating local privilege escalation and remote code execution via unauthenticated API, including…

command-and-controldns-analysisexploitation+8
2011 months ago
Previous1…91011…20Next