Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Binary exploitation techniques, ROP chains, heap exploitation, format strings, and memory corruption research.

Kitploit recommended

Top tools

10 selected

pwntools

gallopsled/pwntools

13.6k3 days ago

pwndbg

pwndbg/pwndbg

10.8k12h 28m ago

gef

hugsy/gef

8.3k2 months ago

how2heap

shellphish/how2heap

8.8k5 months ago

ROPgadget

jonathansalwan/ropgadget

4.5k3 months ago

Ropper

sashs/ropper

2.1k1 month ago

angr

angr/angr

9.0k2h 57m ago

ghidra

nationalsecurityagency/ghidra

71.1k15h 37m ago

radare2

radareorg/radare2

24.5k5 hours ago

#10

x64dbg

x64dbg/x64dbg

49.1k2 days ago

Newest Relevance Most popular Recently updated

4347 results

cve-2021-3156

yaunsky/cve-2021-3156

cve-2021-3156;sudo堆溢出漏洞；漏洞检测

privilege-escalationvulnerability-analysisexploitation+3

55 years ago

CVE-2026-31431-PoC

sl4ck0th/cve-2026-31431-poc

Proof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via AF_ALG page cache write, achieving root on major…

privilege-escalationexploit-frameworksvulnerability-analysis+4

45 months ago

CVE-2025-21479-FX5P

diyiqiuye/cve-2025-21479-fx5p

Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)

android-securityprivilege-escalationexploitation+6

223 days ago

cve-2022-32223

ianyong/cve-2022-32223

Demonstration exploit for CVE-2022-32223: DLL hijacking in Node.js on Windows via malicious providers.dll, targeting OpenSSL installations.

vulnerability-analysisexploitationsupply-chain-security+2

34 years ago

incomplete-exploit-for-CVE-2018-4150-bpf-filter-poc-

littlelailo/incomplete-exploit-for-cve-2018-4150-bpf-filter-poc-

Proof-of-concept exploit for CVE-2018-4150 targeting macOS kernel BPF filter on devices without SMAP. Demonstrates local privilege escalation via…

vulnerability-analysisexploitationpenetration-testing+2

78 years ago

CVE-2025-11001---7-Zip

mbanyamer/cve-2025-11001---7-zip

CVE-2025-11001 (CVSS 7.0) – 7-Zip < 25.00 Directory Traversal → RCE via crafted ZIP with symlink. Allows arbitrary file write when extracted as…

payload-generationvulnerability-analysisexploitation+3

711 months ago

CVE-2026-36213

sec-zone/cve-2026-36213

CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2

privilege-escalationvulnerability-analysisexploitation+3

54 months ago

CVE-2023-41993

0x06060606/cve-2023-41993

CVE-2023-41993

ios-securityexploitationweb-application-exploitation+3

63 years ago

CVE-2023-0386

p4x1s/cve-2023-0386

CVE-2023-0386 EXP

privilege-escalationvulnerability-analysisexploitation+1

43 years ago

N0xis

structio-labs/n0xis

AI-first reverse-engineering toolkit: static analysis, SSA decompiler, live memory, provenance. Source-available (PolyForm Noncommercial).

static-analysisdynamic-analysis-sandboxingmemory-forensics+7

26 days ago

copy-fail-CVE-2026-31431-C

bigwario/copy-fail-cve-2026-31431-c

C exploit for CVE-2026-31431, targeting multiple Ubuntu and Kali versions with x86_64 and ARM64 builds.

vulnerability-analysisexploitationbinary-exploitation

45 months ago

ntoskrnl-metadata

piffd0s/ntoskrnl-metadata

eprocess offset puller for relevant member offsets and function addresses for cve-2026-40369

vulnerability-analysisexploitationreverse-engineering+2

35 months ago

SysTracingPoc

modulexcite/systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

privilege-escalationvulnerability-analysisexploitation+1

26 years ago

MSC-EvilTwin-Local-Privilege-Escalation

mbanyamer/msc-eviltwin-local-privilege-escalation

CVE-2025-26633 (CVSS 7.8) – Zero-day MMC .msc EvilTwin LPE actively exploited by Water Gamayun APT. PoC creates local admin via malicious MSC file on…

privilege-escalationpayload-generationvulnerability-analysis+4

411 months ago