Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.

Kitploit recommended

Top tools

10 selected

security-research

google/security-research

4.6k20h 56m ago

0days-in-the-wild

googleprojectzero/0days-in-the-wild

1.0k2 months ago

MSRC-Security-Research

microsoft/msrc-security-research

1.4k2 years ago

publications

trailofbits/publications

1.9k4 days ago

papers-we-love

papers-we-love/papers-we-love

110.8k24 days ago

criticality_score

ossf/criticality_score

1.5k1 month ago

attack-stix-data

mitre-attack/attack-stix-data

70310 days ago

Security-101

microsoft/security-101

6.8k2 months ago

h4cker

the-art-of-hacking/h4cker

28.9k1 day ago

#10

offensive-ai-compilation

jiep/offensive-ai-compilation

1.4k20 days ago

Newest Relevance Most popular Recently updated

2038 results

writeup-CVE-2024-3094

michalashurov/writeup-cve-2024-3094

Technical analysis and writeup of CVE-2024-3094, the XZ Utils backdoor. Explores the supply-chain attack, exploitation mechanics, and detection…

vulnerability-analysisexploitationsupply-chain-security+2

7 months ago

CVE-2025-67730

dharan10/cve-2025-67730

A public disclourse of CVE-2025-67730 in Frape lms By dharan ragunathan

vulnerability-analysisweb-application-exploitationweb-security+2

9 months ago

CVE-2020-16012-PoC

leopoldabgn/cve-2020-16012-poc

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

vulnerability-analysisexploitationweb-security+2

8 months ago

CVE-2025-52204

j0qq3r/cve-2025-52204

Coordinated disclosure of CVE-2025-52204: reflected XSS and HTML injection in Znuny OTRS customer.pl endpoint. Includes technical summary, affected…

vulnerability-analysisweb-application-exploitationweb-security+2

7 months ago

CVE-2026-31402

0xblackash/cve-2026-31402

CVE-2026-31402

memory-forensicsvulnerability-analysisexploitation+3

6 months ago

CVE-2025-65300

garux-sec/cve-2025-65300

Documentation of CVE-2025-65300: a stored Cross-Site Scripting (XSS) vulnerability in the Coohom SaaS platform's Account Settings profile address…

vulnerability-analysisweb-application-exploitationweb-security+2

10 months ago

React2Shell-Analysis

kugelbyte/react2shell-analysis

A research report on CVE-2025-55182 (React2Shell).

vulnerability-analysisexploitationweb-application-exploitation+2

10 months ago

conti-ransomware-writeup

justjeff211/conti-ransomware-writeup

Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows…

vulnerability-analysisforensicsmalware-analysis+6

7 months ago

CVE-2026-27621

lukasz-rybak/cve-2026-27621

CVE-2026-27621 - TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

vulnerability-analysisweb-application-exploitationweb-security+2

6 months ago

security-advisories

minhajultaivin/security-advisories

XSS vulnerability in SourceCodester Student Grades Management System (CVE-2025-63892)

vulnerability-analysisexploitationweb-security+3

11 months ago

CVE-2025-56801

shinycolumn/cve-2025-56801

AES-CFB IV Generation Vulnerability in Reolink Desktop Application

vulnerability-analysisexploitationcryptography+2

1 year ago

o3_finds_cve-2025-37899

ccss17/o3_finds_cve-2025-37899

Artefacts for blog post on finding CVE-2025-37899 with o3

vulnerability-analysisexploitationweb-application-exploitation+3

11 months ago

CVE-2026-22849

lukasz-rybak/cve-2026-22849

CVE-2026-22849 - Saleor lacks proper HTML sanitization in rich text fields

vulnerability-analysisweb-securitypapers-research+2

6 months ago

CVE-2024-55182

mernjsb/cve-2024-55182

Detailed technical analysis of CVE-2025-55182 (React2Shell), a critical RCE vulnerability in React Server Components, including affected packages,…

vulnerability-analysisexploitationweb-application-exploitation+2

10 months ago

cve-2025-55182-react2shell-analysis

porsellaj/cve-2025-55182-react2shell-analysis

Technical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)

vulnerability-analysisexploitationweb-application-exploitation+2

6 months ago

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

sangrok-jeon/cve-2020-1938-tomcat-ajp-ghostcat--analysis

CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis

vulnerability-analysisexploitationweb-security+2

6 months ago

CS50FinalProject

m1lo25/cs50finalproject

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

vulnerability-analysissupply-chain-securitypapers-research+3

11 year ago

CVE-2026-3805-curl-SMB-UAF

rat5ak/cve-2026-3805-curl-smb-uaf

CVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure

memory-forensicsvulnerability-analysisexploitation+3

3 months ago

Previous 1…939495…100 Next

Papers & Research

Top tools

security-research

0days-in-the-wild

MSRC-Security-Research

publications

papers-we-love

criticality_score

attack-stix-data

Security-101

h4cker

offensive-ai-compilation

writeup-CVE-2024-3094

CVE-2025-67730

CVE-2020-16012-PoC

CVE-2025-52204

CVE-2026-31402

CVE-2025-65300

React2Shell-Analysis

conti-ransomware-writeup

CVE-2026-27621

security-advisories

CVE-2025-56801

o3_finds_cve-2025-37899

CVE-2026-22849

CVE-2024-55182

cve-2025-55182-react2shell-analysis

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CS50FinalProject

CVE-2026-3805-curl-SMB-UAF