Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
106 results
StandIn preview

StandIn

GitHubfuzzysecurity/standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

dns-analysisexploitationlateral-movement+3
874
4 years ago
cve-2020-1350 preview

cve-2020-1350

GitHubgdwnet/cve-2020-1350

A powershell script to deploy the registry mitigation key for CVE-2020-1350

configuration-auditingdns-analysisexploitation+3
6 years ago
gpp-encrypt preview

gpp-encrypt

GitHubmauricelambert/gpp-encrypt

This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD (CVE-2014-1812).

encryption-decryption-toolsexploitationlabs-practice+2
3 years ago
TaskHound preview

TaskHound

GitHub1r0bit/taskhound

Tool to enumerate privileged Scheduled Tasks on Remote Systems

information-gatheringlateral-movementpenetration-testing+4
3127 days ago
wirehole preview

wirehole

GitHubiamstoxe/wirehole

WireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and easily…

dns-analysisnetwork-securityprivacy
5.0k11 days ago
Certify preview

Certify

GitHubghostpack/certify

C# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…

authentication-authorizationexploitationpenetration-testing+3
2.0k24 days ago
icebreaker preview

icebreaker

GitHubdanmcinerney/icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

password-crackingpenetration-testingpost-exploitation+3
1.2k7 years ago
ADRecon preview

ADRecon

GitHubsense-of-security/adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current…

information-gatheringpenetration-testingpost-exploitation+1
1.9k6 years ago
AutomatedLab preview

AutomatedLab

GitHubautomatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

cloud-infrastructure-securityeducationlabs-practice+1
2.2k2 months ago
wBlock preview

wBlock

GitHub0xcub3/wblock

The next-generation ad blocker for Safari. Free and open source on macOS, iOS, iPadOS, and visionOS, with 750,000 rules, userscripts, userstyles, and…

anti-botios-securityprivacy+2
2.8k9h 50m ago
AADInternals preview

AADInternals

GitHubgerenios/aadinternals

PowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…

authenticationcloud-securityidentity-access-management+2
1.7k11 months ago
ADExplorerSnapshot preview

ADExplorerSnapshot

GitHubc3c/adexplorersnapshot

Parses AD Explorer snapshots into BloodHound-compatible JSON or NDJSON for Active Directory reconnaissance and attack path mapping.

information-gatheringpenetration-testingreconnaissance+1
1.1k1 month ago
numa preview

numa

GitHubrazvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

dns-analysisdns-fuzzingdns-subdomain-enumeration+3
1.4k10h 51m ago
Dark-Moon preview

Dark-Moon

GitHubascit31/dark-moon

Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver…

ai-securitycloud-securitydevsecops+6
8907 days ago
AD_Miner preview

AD_Miner

GitHubad-security/ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security…

configuration-auditingeducationinformation-gathering+6
1.6k5 months ago
super preview

super

GitHubspr-networks/super

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

dns-analysisnetwork-securityprivacy+1
8579 days ago
PSPKIAudit preview

PSPKIAudit

GitHubghostpack/pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

penetration-testingprivilege-escalation
9472 years ago
fakelogonscreen preview

fakelogonscreen

GitHubbitsadmin/fakelogonscreen

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

password-attacksphishing-toolspost-exploitation+2
1.4k6 years ago
Previous123456Next