Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
68 results
SharpCollection preview

SharpCollection

GitHubflangvik/sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…

curated-resourcesexploitationlateral-movement+6
3.0k
11h 19m ago
ShellPop preview

ShellPop

GitHub0x00-0x00/shellpop

Pop shells like a master.

command-and-controlencryption-decryption-toolsexploitation+6
1.5k7 years ago
recox preview

recox

GitHubsamhaxr/recox

Master script for web reconnaissance

information-gatheringpenetration-testingreconnaissance+3
3373 years ago
cve-2020-11651 preview

cve-2020-11651

GitHubdozernz/cve-2020-11651

Proof-of-concept exploit for CVE-2020-11651 achieving pre-authentication remote code execution on SaltStack master and minions via salt.cmd runner.

command-and-controlexploitationpenetration-testing+2
1066 years ago
FakeMBR preview

FakeMBR

GitHubmalwaretech/fakembr

TDL4 style rootkit to spoof read/write requests to master boot record

binary-analysisexploitationmalware-analysis+2
13611 years ago
hdcp-genkey preview

hdcp-genkey

GitHubrjw57/hdcp-genkey

Generate HDCP source and sink keys from the leaked master key

cryptographyembedded-systems-securityencryption-decryption-tools+2
16413 years ago
amd-ryzen-master-driver-v17-exploit preview

amd-ryzen-master-driver-v17-exploit

GitHubtijme/amd-ryzen-master-driver-v17-exploit

Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

binary-exploitationexploitationexploit-frameworks+4
1603 years ago
CloudSec preview

CloudSec

GitHubeshlomo1/cloudsec

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

anti-botcloud-securitycontainer-escape+8
3511 days ago
LoadReload preview

LoadReload

GitHub0xroam/loadreload

Shellcode Loader for Master Thesis

anti-botbinary-exploitationeducation+5
743 months ago
keelog-bof preview

keelog-bof

GitHubjakobfriedl/keelog-bof

Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.

information-gatheringpassword-crackingpost-exploitation+2
513 months ago
dpapi-toolkit preview

dpapi-toolkit

GitHubcrypt0p3g/dpapi-toolkit

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

digital-forensicsencryption-decryption-toolsforensics+7
3029 days ago
bw-dump preview

bw-dump

GitHubmarkuta/bw-dump

A proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.

digital-forensicsexploitationforensics+4
422 years ago
CVE-2023-20564 preview

CVE-2023-20564

GitHubntgabrielgomes/cve-2023-20564

Proof-of-concept exploit for CVE-2023-20564 demonstrating arbitrary physical memory read/write via AMD Ryzen Master Driver IOCTL handlers, enabling…

binary-exploitationexploitationhardware-security+4
209 months ago
aes256_passwd_store preview

aes256_passwd_store

GitHubentry33/aes256_passwd_store

AES-256 encrypted password manager with scrypt/SHA256 key derivation, supporting create, edit, query, and master password change operations with…

cryptographyencryption-decryption-toolspassword-attacks+1
114 years ago
gobalance-patch preview

gobalance-patch

GitHubkolmteistov/gobalance-patch

Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…

cryptographyeducationexploitation+3
413 days ago
cve-2023-32784 preview

cve-2023-32784

GitHubmister-turtle/cve-2023-32784

Extracts KeePass master passwords from memory dumps of unlocked databases, outputting potential characters by position, a passphrase, and a…

digital-forensicsexploitationforensics+3
42 years ago
webauthn_tpm_portable preview

webauthn_tpm_portable

GitHubmimi89999/webauthn_tpm_portable

Portable, hardware-backed WebAuthn credentials using TPM 2.0. Deterministic parent key derived from a master seed enables cross-device credential…

authenticationcryptographyencryption-decryption-tools+2
47 months ago
CVE-2023-32784-keepass-linux preview

CVE-2023-32784-keepass-linux

GitHubctm1/cve-2023-32784-keepass-linux

KeePass Master Password Extraction PoC for Linux

exploitationforensicsmemory-forensics+3
22 years ago
Previous1234Next