As last year (https://www.kitploit.com/2022/12/top-20-most-popular-hacking-tools-in.html), this year we made a ranking with the most popular tools between January and December 2023.



The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration Testing, Advanced Vulnerability Management, Stealth Communication Techniques, Open-Source General Purpose Vulnerability Scanning, and more.


Without going into further details, we have prepared a useful list of the most popular tools in Kitploit 2023:














PhoneSploit-Pro - An All-In-One Hacking Tool To Remotely Exploit Android Devices Using ADB And Metasploit-Framework To Get A Meterpreter Session (https://www.kitploit.com/2023/04/phonesploit-pro-all-in-one-hacking-tool.html)

Gmailc2 - A Fully Undetectable C2 Server That Communicates Via Google SMTP To Evade Antivirus Protections And Network Traffic Restrictions (https://www.kitploit.com/2023/02/gmailc2-fully-undetectable-c2-server.html)

Faraday - Open Source Vulnerability Management Platform (https://www.kitploit.com/2023/02/faraday-open-source-vulnerability.html)

CloakQuest3r - Uncover The True IP Address Of Websites Safeguarded By Cloudflare (https://www.kitploit.com/2023/12/cloakquest3r-uncover-true-ip-address-of.html)

Killer - Is A Tool Created To Evade AVs And EDRs Or Security Tools (https://www.kitploit.com/2023/06/killer-is-tool-created-to-evade-avs-and.html)

Geowifi - Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases (https://www.kitploit.com/2022/03/geowifi-search-wifi-geolocation-data-by.html)

Waf-Bypass - Check Your WAF Before An Attacker Does (https://www.kitploit.com/2023/03/waf-bypass-check-your-waf-before.html)

PentestGPT - A GPT-empowered Penetration Testing Tool (https://www.kitploit.com/2023/05/pentestgpt-gpt-empowered-penetration.html)

Sirius - First Truly Open-Source General Purpose Vulnerability Scanner (https://www.kitploit.com/2023/10/sirius-first-truly-open-source-general.html)

How I made 7K on Epic Games Bug Bounty

I escalated a low impact vulnerability to a critical one and received 7K! Let me show you how I did it.Continue reading on Medium »
Read more...

How to develop rootkits and malware’s in c
https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/

<!-- SC_OFF -->Hello everyone, ‏I study C programming language and I want to train on rootkits and malwares. I want to know what libraries and points to focus on in order to develop and learn this subject. <!-- SC_ON --> submitted by /u/Mundane-Worker-375 (https://www.reddit.com/user/Mundane-Worker-375)
[link] (https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/) [comments] (https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/)

1.14 Lab: SQL injection with filter bypass via XML encoding | 2023

This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application’s…Continue reading on Medium »
Read more...