Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
23 results
arpy preview
Archived

arpy

GitHubivanvza/arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource

dns-analysisinformation-gatheringnetwork-security+3
262
7 years ago
Qu1cksc0pe preview

Qu1cksc0pe

GitHubcyb3rmx/qu1cksc0pe

All-in-One malware analysis tool.

android-securitydynamic-analysis-sandboxingforensics+4
2.1k5 days ago
ZSC preview

ZSC

GitHubowasp/zsc

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

encryption-decryption-toolsexploit-frameworkspayload-generation+5
6522 years ago
Armor preview

Armor

GitHubtokyoneon/armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

encryption-decryption-toolspayload-developmentpayload-generation+3
2777 years ago
EvilClippy preview

EvilClippy

GitHuboutflanknl/evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis…

educationexploitationmalware-analysis+4
2.3k5 years ago
njutils preview

njutils

GitHubseep1959/njutils

A client and chat program for njrat 0.6.4, 0.7d, and 0.7d golden edition.

command-and-controlpayload-developmentpenetration-testing+3
78 years ago
pupy preview

pupy

GitHubalessandroz/pupy

Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It…

command-and-controldata-exfiltrationlateral-movement+7
918 years ago
cloudgoat preview

cloudgoat

GitHubrhinosecuritylabs/cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloud-securityctfeducation+5
3.7k5 months ago
cs-suite preview

cs-suite

GitHubsecurityftw/cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
1.2k5 years ago
pupy preview
Archived

pupy

GitHubn1nj4sec/pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

android-securitycommand-and-controllateral-movement+5
9.0k2 years ago
EvilOSX preview

EvilOSX

GitHubmarten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

command-and-controlinformation-gatheringpassword-cracking+6
2.4k5 years ago
fsmon preview

fsmon

GitHubnowsecure/fsmon

Filesystem monitor tool for Linux/Android iOS/macOS

android-securitydigital-forensicsdynamic-analysis-sandboxing+5
1.0k4 months ago
macphish preview

macphish

GitHubcldrn/macphish

Generates malicious Office for Mac macros with beacon, credential harvesting, and meterpreter payloads for phishing and exploitation testing on macOS.

exploitationpayload-generationphishing
24511 months ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.5k11h 51m ago
IPC-Memory-Mac-OSX-Exploit preview

IPC-Memory-Mac-OSX-Exploit

GitHubraymondpittman/ipc-memory-mac-osx-exploit

CVE-2014-1322 - IPC Local Security Bypass | Mac OSX (Affected. >= 10.9.2)

binary-exploitationexploitationprivilege-escalation+1
6 years ago
perl-CVE-2013-1775 preview

perl-CVE-2013-1775

GitHubbekhzod0725/perl-cve-2013-1775

CVE-2013-1775 Exploit written in Perl

exploitationexploit-frameworkspenetration-testing+2
9 years ago
macOS-Security-and-Privacy-Guide preview

macOS-Security-and-Privacy-Guide

GitHubdrduh/macos-security-and-privacy-guide

Curated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…

authenticationcryptographycurated-resources+4
22.5k8 days ago
xmlrpc-bruteforcer preview
Archived

xmlrpc-bruteforcer

GitHubkavishgr/xmlrpc-bruteforcer

An XMLRPC brute forcer targeting Wordpress written in Python 3. (DISCONTINUED)

information-gatheringpassword-attackspenetration-testing+2
631 year ago
Previous12Next