Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Curated cybersecurity lists, collections, and learning references with clear scope and practical value.

Kitploit recommended

Top tools

10 selected

PayloadsAllTheThings

swisskyrepo/payloadsallthethings

79.9k1 month ago

hacktricks

hacktricks-wiki/hacktricks

12.1k5h 35m ago

Awesome-Hacking

hack-with-github/awesome-hacking

118.0k2 months ago

the-book-of-secret-knowledge

trimstray/the-book-of-secret-knowledge

237.8k1 year ago

CheatSheetSeries

owasp/cheatsheetseries

32.9k13h 25m ago

awesome-pentest

enaqx/awesome-pentest

26.9k2 months ago

awesome-security

sbilly/awesome-security

14.7k9 months ago

awesome-osint

jivoi/awesome-osint

28.0k13h 10m ago

awesome-malware-analysis

rshipp/awesome-malware-analysis

14.1k2 years ago

#10

awesome-appsec

paragonie/awesome-appsec

7.0k1 year ago

Newest Relevance Most popular Recently updated

1478 results

2024InformationSecurityEngineer

jas502n/2024informationsecurityengineer

2024年信息安全工程师、2024InformationSecurityEngineer

android-securityencryption-decryption-toolsnetwork-security+4

11 year ago

CVE-disclosures

archana1122m/cve-disclosures

CVE-2026-3171 and CVE-2026-3170 vulnerability disclosure by Archana M

vulnerability-analysisweb-securitypapers-research+2

7 months ago

CVE-2026-39813

0xblackash/cve-2026-39813

CVE-2026-39813

vulnerability-analysisexploitationweb-application-exploitation+3

6 months ago

My-Sigma-Rule-Collection

17patmaks/my-sigma-rule-collection

Sigma Rule for CVE-2025-49666

vulnerability-analysisthreat-intelligenceintrusion-detection+3

7 months ago

CVE-2022-42889-Analysis

sangrok-jeon/cve-2022-42889-analysis

CVE-2022-42889 취약점 분석보고서

vulnerability-analysisexploitationweb-application-exploitation+3

7 months ago

CVE-2025-55182-Researching-process

cybersecurity-enthusiasts-ce/cve-2025-55182-researching-process

Defensive research repository for CVE-2025-55182 (Pre-Auth RCE in React Server Components/Next.js). Includes technical analysis, detection rules…

ioc-managementvulnerability-analysisexploitation+6

6 months ago

CVE-2026-1375

d3kc4rt1/cve-2026-1375

Authenticated IDOR / Broken Access Control in Tutor LMS Plugin

vulnerability-analysisweb-application-exploitationpenetration-testing+3

6 months ago

openclaw-vuln-report

joseph19820124/openclaw-vuln-report

Chinese-language vulnerability analysis report for CVE-2026-25253, detailing a cross-site WebSocket hijacking flaw enabling one-click remote code…

vulnerability-analysisweb-securityeducation+1

8 months ago

nextjs-lodash-cve-2025-13465-repro

jaytarr-geo/nextjs-lodash-cve-2025-13465-repro

Reproduction environment for CVE-2025-13465, demonstrating a vulnerability in Next.js applications using Lodash. Provides a minimal setup to test and…

vulnerability-analysiscode-analysisweb-security+2

7 months ago

CVE-2026-26417

aksalsalimi/cve-2026-26417

Documentation of a broken access control vulnerability in TCS Cognix Recon Client v3.0, detailing CWE-862/639, affected endpoints, and remediation…

vulnerability-analysisweb-securityauthentication+2

7 months ago

CVE-2026-22849

lukasz-rybak/cve-2026-22849

CVE-2026-22849 - Saleor lacks proper HTML sanitization in rich text fields

vulnerability-analysisweb-securitypapers-research+2

6 months ago

CVE-2024-3094-analysis

ikram124/cve-2024-3094-analysis

Security analysis project: Real-world CVE breakdown

vulnerability-analysisthreat-intelligencesupply-chain-security+3

11 year ago

CS50FinalProject

m1lo25/cs50finalproject

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

vulnerability-analysissupply-chain-securitypapers-research+3

11 year ago