Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

145 results

longfellow-zk

google/longfellow-zk

Implementation of the Google Zero-Knowledge library for Identity Protocols.

authenticationcryptographyeducation+3

1.3k

13h 16m ago

CVE-2026-PSA-2026-00043-1

horkimhab/cve-2026-psa-2026-00043-1

Proof-of-concept exploit for an unauthenticated root authentication bypass in Proxmox VE 7.0-8.0.3, intended for authorized security testing and…

authenticationeducationexploitation+3

1 day ago

CVE-2026-24061-Telnetd

ish3ng0m4/cve-2026-24061-telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass

authenticationeducationexploitation+3

1 day ago

CVE-2026-18963_analyst

minh3102011/cve-2026-18963_analyst

Docker-based lab for reproducing Keycloak CVE-2026-18963, including vulnerable version setup, realm seeding, and source-level workflow analysis with…

authenticationeducationexploitation+3

7 days ago

CVE-2026-24061

obrunolima1910/cve-2026-24061

🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.

authenticationeducationexploitation+3

7 days ago

CVE-2026-18963-keycloak

red-darkin/cve-2026-18963-keycloak

Proof-of-concept exploit for CVE-2026-18963, a critical Keycloak reset-credentials bypass enabling unauthenticated account takeover. Includes lab…

authenticationeducationexploitation+3

198 days ago

CVE-2026-66908

oscerd/cve-2026-66908

Proof-of-concept reproducer for Apache Camel JWT authentication bypass (CVE-2026-66908) demonstrating missing iss/aud validation in…

authenticationeducationexploitation+2

9 days ago

CVE-2026-29000-PoC

dua2z3rr/cve-2026-29000-poc

CVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC

authenticationctfeducation+5

111 days ago

messari-crack

timuronlinq/messari-crack

Cracking utility to bypass premium access controls on Messari's research platform, enabling unauthorized access to premium reports and real-time…

authenticationcryptographyexploitation+3

21914 days ago

CVE-2026-24061

jacubes/cve-2026-24061

CVE-2026-24061 exploit PoC

authenticationeducationexploitation+3

82414 days ago

CVE-2026-20896-Gitea-Authentication-Bypass

judgedbykira/cve-2026-20896-gitea-authentication-bypass

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in…

authenticationeducationexploitation+5

18 days ago

CVE-2026-9090-poc

kimdir01/cve-2026-9090-poc

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

authenticationexploitationpayload-generation+4

18 days ago

CVE-2026-8793

h4zaz/cve-2026-8793

esponsible disclosure write-ups for CVE-2026-8793 - PaperCut NG 25.0.11

authenticationeducationexploitation+4

19 days ago

CVE-2026-34348

horkimhab/cve-2026-34348

CVE-2026-34348 - Draft or TODO

authenticationeducationexploitation+3

23 days ago

CVE-2026-52824

azureadtrent/cve-2026-52824

Technical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <=…

authenticationcryptographyeducation+3

1 month ago

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

george0papasotiriou/cve-2026-11116-snmpv3-authentication-bypass-via-default-engineid

Demonstrates CVE-2026-11116 SNMPv3 authentication bypass caused by guessable default EngineIDs, with a Python pysnmp simulation and guidance for…

authenticationeducationexploitation+3

1 month ago

CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

george0papasotiriou/cve-2026-5050-blind-ldap-injection-via-unescaped-filter

Reproduces CVE-2026-5050 with a simulated Flask LDAP server and exploit script, demonstrating blind LDAP injection via unescaped filters to bypass…

authenticationeducationexploitation+2

1 month ago

CP-PLUS-EZ-P21-CVE-2026-65893-65894

cybervinner/cp-plus-ez-p21-cve-2026-65893-65894

Documents CP PLUS EZ-P21 IP camera CVEs: arbitrary code execution via debug feature and improper authentication of HTTP endpoints, with responsible…

authenticationeducationembedded-systems-security+5

1 month ago

Previous12…9 Next