Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.

Kitploit recommended

Top tools

10 selected

pwntools

gallopsled/pwntools

13.6k3 days ago

pwndbg

pwndbg/pwndbg

10.8k7h 27m ago

gef

hugsy/gef

8.3k2 months ago

RsaCtfTool

rsactftool/rsactftool

7.1k9 days ago

CyberChef

gchq/cyberchef

35.6k4 days ago

Ciphey

bee-san/ciphey

21.6k7 days ago

how2heap

shellphish/how2heap

8.8k5 months ago

ROPgadget

jonathansalwan/ropgadget

4.5k3 months ago

Ropper

sashs/ropper

2.1k1 month ago

#10

zsteg

zed-0xff/zsteg

1.6k8 months ago

Newest Relevance Most popular Recently updated

1090 results

CVE-2004-1561

ratiros01/cve-2004-1561

Standalone Python exploit for CVE-2004-1561 (Icecast header overflow), designed for penetration testing and CTF practice.

vulnerability-analysisexploitationctf+2

10 months ago

CVE-2021-24891-Simulation

hackmelocal/cve-2021-24891-simulation

Containerized lab environment to simulate and exploit a DOM-based XSS vulnerability (CVE-2021-24891) in the Elementor WordPress plugin for hands-on…

vulnerability-analysisweb-application-exploitationweb-security+3

1 year ago

Sauercloude

shi10587s/sauercloude

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

exploit-frameworksvulnerability-analysisexploitation+2

4 years ago

Sauercloude

chatbottesisgmailh/sauercloude

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

exploit-frameworksvulnerability-analysisexploitation+1

4 years ago

PoC_TLS1_3_CVE-2020-13777

prprhyt/poc_tls1_3_cve-2020-13777

Proof-of-concept for CVE-2020-13777 (GnuTLS TLS 1.3 reconnect vulnerability). Parses pcap files to demonstrate the flaw for educational and technical…

packet-sniffing-analysisvulnerability-analysisexploitation+3

5 years ago

demo-CVE-2021-29447-lezione

specializzazione-cyber-security/demo-cve-2021-29447-lezione

Proof-of-concept exploit for CVE-2021-29447, an authenticated XXE vulnerability in WordPress 5.6-5.7. Includes lab setup, malicious WAV generation,…

vulnerability-analysisexploitationweb-application-exploitation+3

3 years ago

CVE-2025-67315

r-pradyun/cve-2025-67315

CSRF vulnerability PoC and remediation guide for employee deactivation in an admin panel. Includes CVSS scoring, attack reproduction steps, and…

vulnerability-analysisexploitationweb-security+3

9 months ago

sonicwall-audit-toolkit

anir0y/sonicwall-audit-toolkit

SonicWall security audit toolkit with vulnerable CTF lab (CVE-2021-20038, CVE-2024-53704)

vulnerability-scannersconfiguration-auditingweb-security+5

7 months ago

CVE-2024-42327

igorbf495/cve-2024-42327

writeup cve-2024-42327

privilege-escalationreconnaissancevulnerability-analysis+7

1 year ago

CVE-2019-12735

datntsec/cve-2019-12735

Detailed technical analysis and proof-of-concept for CVE-2019-12735, an arbitrary code execution vulnerability in Vim/Neovim via modeline sandbox…

vulnerability-analysisexploitationctf+3

5 years ago

CVE-2023-30547

user0x1337/cve-2023-30547

PoC to CVE-2023-30547 (Library vm2)

payload-generationvulnerability-analysisexploitation+3

2 years ago

CVE-2024-24590

j3r1ch0123/cve-2024-24590

Created this exploit for the Hack The Box machine, Blurry.

payload-generationvulnerability-analysisexploitation+3

2 years ago

CVE-2023-52654

foxyproxys/cve-2023-52654

Automated privilege escalation script exploiting misconfigured setuid/sgid binaries, sudo, cron, and LD_PRELOAD on Unix systems. Designed for CTF and…

privilege-escalationvulnerability-analysisexploitation+3

2 years ago