Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
106 results
TruffleSnout preview

TruffleSnout

GitHubdsnezhkov/trufflesnout

Iterative AD discovery toolkit for offensive operations

information-gatheringpenetration-testingreconnaissance+1
84
6 years ago
ad-autopwn preview

ad-autopwn

GitHubjonaslejon/ad-autopwn

Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

command-and-controlexploitationlateral-movement+7
4128 days ago
badsuccessor preview

badsuccessor

GitHubcybrly/badsuccessor

Exploits the Windows Server 2025 dMSA privilege escalation vulnerability to enumerate writable OUs, escalate to arbitrary domain users, extract…

adversarial-attackexploitationinformation-gathering+7
1221 year ago
latma preview

latma

GitHubsilverfort-open-source/latma

Collects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…

anomaly-detectioncloud-securityincident-response+5
803 years ago
adexplorersnapshot-rs preview

adexplorersnapshot-rs

GitHubt94j0/adexplorersnapshot-rs

Converts Active Directory Explorer snapshot (.dat) files into BloodHound CE JSON archives for graph-based AD attack-path analysis and reconnaissance.

identity-access-managementinformation-gatheringpenetration-testing+1
974 months ago
sccmsqlclient preview

sccmsqlclient

GitHubsynacktiv/sccmsqlclient

MSSQL client for SCCM environments, enabling reconnaissance, remote PowerShell execution on managed clients, and extraction of sensitive secrets such…

database-securityexploitationinformation-gathering+6
323 months ago
SSOh-No preview

SSOh-No

GitHuboptionalctf/ssoh-no

User enumeration and password spraying tool for testing Azure AD

authenticationcloud-securitypassword-attacks+1
714 years ago
dc-sonar preview

dc-sonar

GitHubst1lly/dc-sonar

Analyzing AD domains for security risks related to user accounts

educationpassword-crackingvulnerability-analysis
643 years ago
AzureADEnumeration preview

AzureADEnumeration

GitHublogisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

cloud-infrastructure-securitycloud-securitydns-analysis+6
797 months ago
AD-description-password-finder preview

AD-description-password-finder

GitHubassurancemaladiesec/ad-description-password-finder

Retrieve AD accounts description and search for password in it

authenticationdefensive-toolsinformation-gathering+5
814 years ago
CVE-2022-26923_AD-Certificate-Services preview

CVE-2022-26923_AD-Certificate-Services

GitHubludovicpatho/cve-2022-26923_ad-certificate-services

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the…

authenticationexploitationpenetration-testing+2
414 years ago
Azure-AD-Password-Checker preview

Azure-AD-Password-Checker

GitHubquahac/azure-ad-password-checker

Azure AD Password Checker

authenticationcloud-securityconfiguration-auditing+3
861 year ago
magicNetdefs preview

magicNetdefs

GitHubcrisprss/magicnetdefs

Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged processes to…

adversarial-attackauthenticationexploitation+3
494 years ago
ADFT preview

ADFT

GitHubkjean13/adft

Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)

configuration-auditingdigital-forensicsforensics+3
517 days ago
CVE-2019-15858 preview

CVE-2019-15858

GitHubgeneraleg/cve-2019-15858

Unauthenticated RCE at Woody Ad Snippets / CVE-2019-15858 (PoC)

exploitationpayload-developmentpenetration-testing+2
326 years ago
CVE-2026-54121-PoC-Exploit preview

CVE-2026-54121-PoC-Exploit

GitHubtc4dy/cve-2026-54121-poc-exploit

👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash…

authentication-authorizationexploitationexploit-frameworks+5
271 month ago
CVE-2026-54121-CertiGhost preview

CVE-2026-54121-CertiGhost

GitHubmarcgoam/cve-2026-54121-certighost

CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.

adversarial-attackauthentication-authorizationexploitation+4
101 month ago
adfly preview

adfly

GitHubzux0x3a/adfly

active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about…

authenticationinformation-gatheringpenetration-testing
126 years ago
Previous123456Next