Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

18 results

openssh-portable

openssh/openssh-portable

Portable OpenSSH

authenticationcryptographynetwork-security+1

4.0k

3 days ago

essh

matthart1983/essh

Enhanced SSH client with TUI — manage connections, keys, and sessions

authenticationlog-analysisnetwork-security+3

10514 days ago

Research-CVE-2026-21858

bannt08/research-cve-2026-21858

Technical analysis and proof-of-concept for CVE-2026-21858, an authentication bypass and RCE in n8n, demonstrating LFI, session forgery, and full…

authenticationexploitationremote-access-trojan+2

4 months ago

CVE-2025-58434_CVE-2025-59528

honney336/cve-2025-58434_cve-2025-59528

CVE-2025-58434 Flowise <= 3.0.5 and earlier allows account takeover via unauthenticated forgot-password token. CVE-2025-59528 lowiseAI Custom MCP…

authenticationexploitationpenetration-testing+3

4 months ago

CVE-2025-58434-59528

azureadtrent/cve-2025-58434-59528

CVE-2025-58434 and CVE-2025-59528 chain POC

authenticationexploitationpenetration-testing+3

44 months ago

CVE-2026-31816-rshell

imjdl/cve-2026-31816-rshell

Exploits CVE-2026-31816 in Budibase to bypass authentication, upload a malicious datasource plugin, and execute a reverse shell for remote access.

authenticationexploitationpayload-development+2

5 months ago

CVE-2025-69985

joshuavanderpoll/cve-2025-69985

Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…

authenticationexploitationremote-access-tool+3

36 months ago

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

mbanyamer/cve-2026-24061-gnu-inetutils-telnetd-remote-authentication-bypass-root-shell-

Proof-of-concept exploit for GNU Inetutils telnetd authentication bypass (CVE-2026-24061) that spawns a root shell via crafted NEW-ENVIRON USER…

authenticationexploitationpenetration-testing+3

6 months ago

CVE-2026-24061

lucaspdiniz/cve-2026-24061

Vulnerability in GNU InetUtils telnetd Enables Remote Root Access

authenticationexploitationpenetration-testing+2

7 months ago

CVE-2026-24061

monstertsl/cve-2026-24061

Python-based scanner that detects CVE-2026-24061 in GNU Inetutils telnetd, allowing batch testing of multiple targets for the authentication bypass…

authenticationexploitationpenetration-testing+2

17 months ago

Ashwesker-CVE-2026-24061

mefhika120/ashwesker-cve-2026-24061

Exploit for CVE-2026-24061, a critical remote authentication bypass in GNU InetUtils telnetd, allowing unauthenticated root access via crafted…

authenticationexploitationpenetration-testing+2

7 months ago

cve-2025-0364

vulncheck-oss/cve-2025-0364

CVE-2025-0364: BigAnt Server RCE Exploit

authenticationexploitationpenetration-testing+3

71 year ago

CVE-2023-42793

hotplugin0x01/cve-2023-42793

JetBrains TeamCity Unauthenticated Remote Code Execution - Python3 Implementation

authenticationexploitationpenetration-testing+3

22 years ago

CVE-2024-4040

mufti22/cve-2024-4040

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote…

authenticationexploitationpenetration-testing+3

2 years ago

pyrexecd

euske/pyrexecd

Standalone SSH server for Windows

authenticationremote-access-toolutilities-frameworks

2263 years ago

CVE-2022-46080

yerodin/cve-2022-46080

Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution

authenticationexploitationpenetration-testing+3

3 years ago

CVE-2022-46169

habib0x0/cve-2022-46169

Cacti: Unauthenticated Remote Code Execution Exploit in Ruby

authenticationexploitationpenetration-testing+3

23 years ago

CVE-2019-17662

tamagaft/cve-2019-17662

Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit

authenticationbinary-exploitationexploitation+2

4 years ago