Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

77 results

CVE-2026-46726

oscerd/cve-2026-46726

Reproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via…

api-securityexploitationpenetration-testing+3

27 days ago

iac-scan-runner

xlab-si/iac-scan-runner

Service that scans your Infrastructure as Code for common vulnerabilities

api-securitycloud-infrastructure-securityconfiguration-auditing+2

492 years ago

CVE-2026-55993

oscerd/cve-2026-55993

PoC reproducer for CVE-2026-55993 (Apache Camel camel-atmosphere-websocket): the WebSocket consumer copies connection query parameters onto the…

api-securityexploitationpenetration-testing+3

29 days ago

CVE-2026-18953

ronamosa/cve-2026-18953

Demonstrates CVE-2026-18953 arbitrary file write in an MCP server's get_resource tool by abusing savePath path traversal; includes vendored…

api-securityexploitationpenetration-testing+1

13 days ago

CVE-2026-23552

oscerd/cve-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

api-securityauthentication-authorizationeducation+3

6 months ago

faraday

infobyte/faraday

Open Source Vulnerability Management Platform

api-securitydevsecopspenetration-testing+1

6.7k1 day ago

CVE-2026-46456

oscerd/cve-2026-46456

Reproducer for CVE-2026-46456 — Apache Camel camel-aws2-sqs inbound message-attribute header injection (Camel control-header injection via…

api-securitycloud-securityexploitation+3

24 days ago

CVE-2020-13945-EXPLOIT

k3ystr0k3r/cve-2020-13945-exploit

A PoC exploit for CVE-2020-13945 - Apache APISIX Remote Code Execution (RCE)

api-securityexploitationpenetration-testing+3

122 years ago

SafeLine

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

anti-botapi-securityapi-security-testing+8

22.4k2 days ago

Damn-Vulnerable-GraphQL-Application

dolevf/damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL…

api-securityapi-security-testingctf+5

1.7k1 year ago

api-scanner-docker

cspf-founder/api-scanner-docker

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …

api-securityapi-security-testingconfiguration-auditing+5

96 months ago

CVE-2026-64640

oscerd/cve-2026-64640

Reproducer that exploits credential vending before location validation in Apache Polaris Iceberg REST, proving cross-tenant cloud reads and bucket…

api-securitycloud-securitydata-exfiltration+5

13 days ago

CVE-2026-33186

johanneslks/cve-2026-33186

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)

api-securityauthentication-authorizationeducation+3

11 month ago

CVE-2026-51954

envincion1991-cmyk/cve-2026-51954

Vulnerability Research

api-securityauthenticationexploitation+2

19 days ago

CVE-2026-42154

shadowbyte1/cve-2026-42154

Proof-of-concept exploit for CVE-2026-42154, a denial-of-service vulnerability in Prometheus Remote Read endpoint via crafted Snappy-compressed…

api-securitycloud-securityexploitation+1

3 months ago

CVE-2025-56643

0xbs0d27/cve-2025-56643

Public reference for CVE-2025-56643 – Wiki.js 2.5.307 JWT Session Vulnerability

api-securityauthenticationexploitation+2

19 months ago

westone-CVE-2021-45232-scanner

osyanina/westone-cve-2021-45232-scanner

A vulnerability scanner that detects CVE-2021-45232 vulnerabilities.

api-securityexploitationpenetration-testing+2

4 years ago

westone-CVE-2021-37580-scanner

osyanina/westone-cve-2021-37580-scanner

A vulnerability scanner that detects CVE-2021-37580 vulnerabilities.

api-securityauthenticationexploitation+2

4 years ago

Previous12 3 4 5 Next