Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.

Kitploit recommended

Top tools

10 selected

security-research

google/security-research

4.6k0 days ago

0days-in-the-wild

googleprojectzero/0days-in-the-wild

1.0k2 months ago

MSRC-Security-Research

microsoft/msrc-security-research

1.4k2 years ago

publications

trailofbits/publications

1.9k12h 6m ago

papers-we-love

papers-we-love/papers-we-love

111.0k28 days ago

criticality_score

ossf/criticality_score

1.5k2 months ago

attack-stix-data

mitre-attack/attack-stix-data

70414 days ago

Security-101

microsoft/security-101

6.8k2 months ago

h4cker

the-art-of-hacking/h4cker

28.9k5 days ago

#10

offensive-ai-compilation

jiep/offensive-ai-compilation

1.4k25 days ago

Newest Relevance Most popular Recently updated

2068 results

-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318

anksgls-sj/-help-vivo-y200i-5.10.218-gki-cve-2026-43499-stack-reclaim-reaches-0x300-need-0x318

Research notes and PoC development for CVE-2026-43499 (GhostLock) kernel UAF on vivo Y200i Android 14, covering futex PI-chain stack-reclaim…

android-securityprivilege-escalationvulnerability-analysis+5

1 month ago

CVE-2026-21445-PoC

codeb0ssx/cve-2026-21445-poc

Academic proof-of-concept demonstrating CVE-2026-21445 [LangFlow] for authorized security research.

vulnerability-analysisexploitationweb-security+2

19 months ago

CVE-2024-51430

black-scorp10/cve-2024-51430

The Online Diagnostic Lab Management System has a security problem called Cross-Site Scripting (XSS) in the Borrower section.

vulnerability-analysisweb-application-exploitationweb-security+2

11 year ago

CVE-2024-34452

surajhacx/cve-2024-34452

Cross-Site Scripting (XSS) Vulnerability in CMSimple_XH

vulnerability-analysisweb-application-exploitationweb-security+2

12 years ago

PP_CVE-2024-38998

cesarbtakeda/pp_cve-2024-38998

Analyzes CVE-2024-38998, a prototype pollution vulnerability in requirejs 2.3.6, demonstrating how malicious config inputs can lead to DoS, RCE, or…

vulnerability-analysisexploitationweb-security+2

11 year ago

CVE-2024-34312

vincentscode/cve-2024-34312

☣️ This repository contains the description and a proof of concept for CVE-2024-34312

vulnerability-analysisexploitationweb-application-exploitation+3

12 years ago

CVE-2025-63830

shubham03007/cve-2025-63830

Identified a Stored Cross-Site Scripting (XSS) vulnerability in CKFinder v1.4.3 via malicious SVG file upload leading to script execution upon file…

vulnerability-analysisweb-application-exploitationweb-security+2

111 months ago

CVE-2021-42574

waseeld/cve-2021-42574

Demonstrates the Trojan Source vulnerability (CVE-2021-42574) by generating source code with invisible Unicode control characters that alter compiler…

static-analysisvulnerability-analysiscode-analysis+3

14 years ago

CVE-2024-22641

zunak/cve-2024-22641

Proof-of-concept for CVE-2024-22641: ReDoS vulnerability in TCPDF <=6.7.4 triggered by crafted SVG files, demonstrating regex backtrack limit…

vulnerability-analysisexploitationweb-security+3

12 years ago

CVE-2025-47423

haluka92/cve-2025-47423

Detailed disclosure of CVE-2025-47423: Local File Inclusion in Personal Weather Station Dashboard 12_lts. Includes PoC, vulnerable code analysis, and…

vulnerability-analysisexploitationweb-application-exploitation+3

2 months ago