Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
CVE-2024-3660-PoC preview

CVE-2024-3660-PoC

GitHubaaryanbhujang/cve-2024-3660-poc

A PoC for CVE-2024-3660. Arbitrary Code Execution in Keras.

ai-securitybinary-exploitationexploitation+3
4
1 year ago
CVE-2025-62593-PoC preview

CVE-2025-62593-PoC

GitHubboreas37/cve-2025-62593-poc

PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.

ai-securityexploitationpenetration-testing+2
12 days ago
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud preview

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

GitHubmegafart1/cve-2026-2472-vertex-ai-sdk-google-cloud

Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.

ai-securitycloud-securityeducation+3
21 day ago
Research-on-CVE-2025-9998 preview

Research-on-CVE-2025-9998

GitHubbalajigund/research-on-cve-2025-9998

vulnerability in CVE 2025-9998 and solution for those vulnerability with help artificial intelligence

ai-securityeducationpapers-research+2
7 months ago
CVE-2025-3248 preview

CVE-2025-3248

GitHub0xgh057r3c0n/cve-2025-3248

Exploit for Langflow AI Remote Code Execution (Unauthenticated)

ai-securityeducationexploitation+3
1 year ago
o3_finds_cve-2025-37899 preview

o3_finds_cve-2025-37899

GitHubccss17/o3_finds_cve-2025-37899

Artefacts for blog post on finding CVE-2025-37899 with o3

ai-securityeducationexploitation+3
9 months ago
cve-2025-32711 preview

cve-2025-32711

GitHubdaryllundy/cve-2025-32711

Proof-of-concept and analysis for CVE-2025-32711

ai-securitycloud-securityconfiguration-auditing+4
31 year ago
CVE-2026-33626-Lab preview

CVE-2026-33626-Lab

GitHubrootdirective-sec/cve-2026-33626-lab
ai-securityctfeducation+3
3 months ago
vibe-coding-security preview

vibe-coding-security

GitHubboxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

ai-securityapi-securityauthentication+9
1411 days ago
CVE-2025-68664-LangGrinch-PoC preview

CVE-2025-68664-LangGrinch-PoC

GitHubak-cybe/cve-2025-68664-langgrinch-poc

A testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only

ai-securitycode-analysiseducation+6
37 months ago
aisecplus-week01-servicenow-ai-security-incident preview

aisecplus-week01-servicenow-ai-security-incident

GitHubololadeabiola03/aisecplus-week01-servicenow-ai-security-incident

Research and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection…

ai-securityauthentication-authorizationcloud-security+5
2 months ago
aisecplus-week01-danielossai preview

aisecplus-week01-danielossai

GitHubdanielossai12/aisecplus-week01-danielossai

AISec Plus Week 1 threat write-up — EchoLeak (CVE-2025-32711), zero-click indirect prompt injection in Microsoft 365 Copilot.

ai-securitycloud-securitydata-exfiltration+4
2 months ago
ShellTorchChecker preview

ShellTorchChecker

GitHuboligocybersecurity/shelltorchchecker

A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654

ai-securitycloud-securityexploitation+3
402 years ago
CVE-2026-42208 preview

CVE-2026-42208

GitHub0xblackash/cve-2026-42208

CVE-2026-40487

ai-securityapi-securitydatabase-security+3
3 months ago
ai-vuln-rediscovery-nginx-cve-2026-42945 preview

ai-vuln-rediscovery-nginx-cve-2026-42945

GitHubchamsbouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945
ai-securitybinary-exploitationeducation+3
3 months ago
CVE-2025-31337 preview

CVE-2025-31337

GitHub1numak1/cve-2025-31337

CVE-2025-31337 Security Advisory - Critical Buffer Overflow in AI Chatbot Framework

ai-securitybinary-exploitationeducation+3
4 months ago
sk-cve-2026-26030-lab preview

sk-cve-2026-26030-lab

GitHubinertfluid/sk-cve-2026-26030-lab

Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4)

ai-securitybinary-exploitationeducation+5
11 month ago
CVE-2026-67598 preview

CVE-2026-67598

GitHubilhomjonr/cve-2026-67598

CVE-2026-67598 — Emlog Pro: disabled TLS certificate validation in AI assistant (MITM → API-key theft). CWE-295, CVSS 9.1. Reported by @IlhomjonR.

ai-securityapi-securitycode-analysis+3
13 days ago
Previous12Next