Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
355 results
arp-validator preview

arp-validator

GitHubrnehra01/arp-validator

Security Tool to detect arp poisoning attacks

defensive-toolsintrusion-detectionnetwork-security+1
54
8 years ago
Above preview

Above

GitHubcaster0x00/above

Passive network security sniffer that analyzes 28 protocols (ARP, STP, OSPF, VLAN, SCADA) to detect vulnerabilities in network equipment without…

network-securitypacket-sniffing-analysispenetration-testing+2
8718 months ago
ipv4Bypass preview

ipv4Bypass

GitHubmilo2012/ipv4bypass

Using IPv6 to Bypass Security

ids-ips-evasionnetwork-securitypenetration-testing+2
931 year ago
ranger preview

ranger

GitHubfunkandwagnalls/ranger

A tool for security professionals to access and interact with remote Microsoft Windows based systems.

command-and-controlexploitationlateral-movement+3
4318 years ago
ATTPwn preview

ATTPwn

GitHubtelefonica/attpwn

ATTPwn

adversarial-attacklateral-movementpenetration-testing+3
2205 years ago
eavesarp preview

eavesarp

GitHubimpostorkeanu/eavesarp

Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)

dns-analysisinformation-gatheringnetwork-security+2
704 years ago
arpy preview
Archived

arpy

GitHubivanvza/arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource

dns-analysisinformation-gatheringnetwork-security+3
2627 years ago
NetRaptor preview

NetRaptor

GitLabs_r_e_e_r_a_j/netraptor

NetRaptor is a GUI-based ARP poisoning tool built with Python that allows you to scan a network, select a target and gateway, and perform a…

educationnetwork-securitypacket-sniffing-analysis+2
15 months ago
shARP preview

shARP

GitHubeuropa502/sharp

An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.

defensive-toolsids-ips-evasionnetwork-security+1
1728 years ago
etherleak-checker preview

etherleak-checker

GitHubmarb08/etherleak-checker

This Python script helps to detect the Etherleak (CVE-2003-0001) vulnerability on a target host by analyzing the padding data in network packets. The…

educationexploitationinformation-gathering+3
51 year ago
kickthemout preview

kickthemout

GitHubk4m4/kickthemout

💤 Kick devices off your network by performing an ARP Spoof attack.

educationnetwork-securitypenetration-testing+1
2.7k6 years ago
CVE-2026-54121-Certighost preview

CVE-2026-54121-Certighost

GitHubzerodayevil/cve-2026-54121-certighost

Proof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…

authenticationexploitationimpersonation-tools+6
248 days ago
nmap-farewell preview

nmap-farewell

GitHubsynacktiv/nmap-farewell

Automated Network Security with Rust: Detecting and Blocking Port Scanners

defensive-toolsintrusion-detectionnetwork-access-control+2
101 year ago
HiveJack preview

HiveJack

GitHubviralmaniar/hivejack

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM,…

lateral-movementpenetration-testingpost-exploitation
1126 years ago
mimikatz preview

mimikatz

GitHubparrotsec/mimikatz

Tool for extracting Windows credentials (passwords, hashes, Kerberos tickets) from memory and performing pass-the-hash, pass-the-ticket, and golden…

authenticationexploitationlateral-movement+5
2.7k2 years ago
SetupHijack preview

SetupHijack

GitHubhackerhouse-opensource/setuphijack

SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and update…

exploitationlateral-movementpayload-generation+3
2677 months ago
EntraPassTheCert preview

EntraPassTheCert

GitHubtemp43487580/entrapassthecert

tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it

authenticationcloud-securityidentity-access-management+4
1351 year ago
backup_dc_registry preview

backup_dc_registry

GitHubhorizon3ai/backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

exploitationlateral-movementmisconfiguration+3
964 years ago
Previous12…20Next