Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Cybersecurity research, materials, labs, and learning paths, including CTFs and curated educational resources.

Kitploit recommended

Top tools

10 selected

hacktricks

hacktricks-wiki/hacktricks

12.1k11h 28m ago

PayloadsAllTheThings

swisskyrepo/payloadsallthethings

79.9k12 days ago

CheatSheetSeries

owasp/cheatsheetseries

32.9k21h 50m ago

Awesome-Hacking

hack-with-github/awesome-hacking

118.0k1 month ago

the-book-of-secret-knowledge

trimstray/the-book-of-secret-knowledge

237.8k1 year ago

awesome-pentest

enaqx/awesome-pentest

26.9k1 month ago

awesome-security

sbilly/awesome-security

14.7k8 months ago

h4cker

the-art-of-hacking/h4cker

28.9k2 days ago

awesome-osint

jivoi/awesome-osint

28.0k4h 21m ago

#10

awesome-malware-analysis

rshipp/awesome-malware-analysis

14.1k2 years ago

Newest Relevance Most popular Recently updated

10346 results

CVE-2025-33073

uziii2208/cve-2025-33073

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

privilege-escalationexploit-frameworksexploitation+4

679 months ago

freebsd_kernel_hacking

xcellerator/freebsd_kernel_hacking

Learning FreeBSD Kernel Hacking - Exercises

privilege-escalationpersistence-mechanismsexploitation+3

666 years ago

xpfarm

a3-n/xpfarm

Free XP on bug bounty, vulnerability scanning by wrapping well maintained tools, to perform automated tests. Alongside AI agents for binary analysis,…

osintreconnaissancevulnerability-scanners+6

444 months ago

ICS-TestBed-Framework

pmaynard/ics-testbed-framework

Deploys realistic virtual SCADA/ICS testbeds with IEC 60870-5-104 and OPC-UA nodes, enabling attack simulations, legitimate packet generation, and…

packet-sniffing-analysisscada-ics-securitynetwork-security+3

707 years ago

advisories

enablesecurity/advisories

Security advisories published by Enable Security

vulnerability-analysisexploitationpenetration-testing+2

447 months ago

RightHand-Persistence

i014n/righthand-persistence

COM Windows Persistence Technique

persistence-mechanismsexploitationpost-exploitation+2

904 months ago

vuln-bank-mobile

commando-x/vuln-bank-mobile

A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…

android-securityvulnerability-analysisreverse-engineering+8

1001 year ago

CVE-2024-20931

dinosn/cve-2024-20931

Java-based exploit for CVE-2024-20931 bypassing CVE-2023-21839 patch in Oracle WebLogic. Uses JNDI injection via ForeignOpaqueReference to achieve…

vulnerability-analysisexploitationweb-application-exploitation+3

612 years ago

DraculaOS

emrekybs/draculaos

Dracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber Intelligence missions.

osintreconnaissancevulnerability-scanners+9

949 months ago

Door404

m4dm0e/door404

Web application backdoor builder

defensive-toolsexploitationweb-security+2

825 years ago

fastjson-RCE

jas502n/fastjson-rce

fastjson-1.2.47

vulnerability-analysisexploitationweb-application-exploitation+2

667 years ago

2023

100daysofyara/2023

Rules Shared by the Community from 100 Days of YARA 2023

malware-analysiseducationcurated-resources

783 years ago

deploy-goad

lkarlslund/deploy-goad

Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04

security-virtualizationpenetration-testingeducation+1

1162 years ago

PyHmmm

codextf2/pyhmmm

Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog post as a…

command-and-controleducationred-teaming+2

862 years ago

Argus

purs3lab/argus

Staged static taint analysis framework for GitHub Actions workflows. Detects code injection vulnerabilities using taint-tracking and an impact…

static-analysisvulnerability-analysiscode-analysis+4

542 years ago

exploit_laravel_cve-2018-15133

aljavier/exploit_laravel_cve-2018-15133

Exploit for Laravel Remote Code Execution with API_KEY (CVE-2018-15133)