Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
624 results
ios-malicious-bithunter preview

ios-malicious-bithunter

GitHubalipay/ios-malicious-bithunter

iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected…

binary-analysisdynamic-analysis-sandboxingios-security+3
88
5 years ago
mojarragadget preview

mojarragadget

GitHubsynacktiv/mojarragadget

Proof-of-concept exploit for a Java gadget chain in the Mojarra library, demonstrating deserialization vulnerability exploitation for versions 2.3…

binary-analysisexploitationpayload-development+2
154 years ago
Binvariants preview

Binvariants

GitHubfutureslab/binvariants

Register-level invariant-guided fuzzing framework for closed-source binaries, leveraging likely invariant violations to discover crashes and bugs in…

binary-analysisexploitationfuzzing+1
62 months ago
cve-2021-33909 preview

cve-2021-33909

GitHubbaerwolf/cve-2021-33909

This module fixes an issue in the kernels filesystem layer (CVE-2021-33909) by kprobe-replacing vulnerable functions during runtime

binary-analysisexploitationincident-response+1
65 years ago
CVE-2026-90782-s2opc-status-clobber preview

CVE-2026-90782-s2opc-status-clobber

GitHubharshrajsinghania/cve-2026-90782-s2opc-status-clobber

Standalone PoC for CVE-2026-90782: status-clobbering NULL dereference in S2OPC alloc_notification_message_items() (DataChange fails, Event succeeds)

binary-analysisexploitationfuzzing+2
17 days ago
CVE-2026-3909 preview

CVE-2026-3909

GitHubjaf0rk/cve-2026-3909

Proof-of-concept exploit for CVE-2026-3909, a Chromium Skia out-of-bounds vulnerability, with patches and crash analysis for reliable triggering in…

binary-analysisexploitationfuzzing+2
25 months ago
CVE-2019-13288-POC preview

CVE-2019-13288-POC

GitHubfineas/cve-2019-13288-poc

Proof-of-concept exploit for CVE-2019-13288, demonstrating infinite recursion denial-of-service in Xpdf 4.01.01 via a crafted PDF file.

binary-analysisexploitationfuzzing+1
22 years ago
cve-2023-4813 preview

cve-2023-4813

GitHubtnishiox/cve-2023-4813

Proof-of-concept exploit for CVE-2023-4813, demonstrating a specific vulnerability in a C-based application for security research and testing.

binary-analysisexploitationvulnerability-analysis
22 years ago
CVE-2026-3008 preview

CVE-2026-3008

GitHubllgsjsm/cve-2026-3008

Technical analysis and proof-of-concept for CVE-2026-3008, a format string injection in Notepad++ 8.9.3 via nativeLang.xml, enabling denial of…

binary-analysisexploitationmalware-analysis+2
15 months ago
servu-cve-2026-28318-poc preview

servu-cve-2026-28318-poc

GitHubeaea0001/servu-cve-2026-28318-poc

SolarWinds Serv-U CVE-2026-28318: unauthenticated Content-Encoding: deflate crash. Root-cause analysis (invalid free of an interior pointer -> heap…

binary-analysisexploitationmemory-forensics+2
13 months ago
CVE-2017-9830 preview

CVE-2017-9830

GitHubsecurifera/cve-2017-9830

Proof-of-concept exploit for CVE-2017-9830, demonstrating a remote code execution vulnerability in a Java-based application.

binary-analysisexploitationvulnerability-analysis
17 years ago
CVE-2025-62454 preview

CVE-2025-62454

GitHub96613686/cve-2025-62454

Proof-of-concept for CVE-2025-62454 that triggers a Windows kernel crash (BSOD) in cldflt.sys via a crafted FSCTL request, causing a page fault in…

binary-analysisexploitationfuzzing+1
19 months ago
CVE-2015-0235_GHOST preview

CVE-2015-0235_GHOST

GitHubfuryutei/cve-2015-0235_ghost

C exploit for the GHOST glibc vulnerability (CVE-2015-0235) enabling remote code execution via buffer overflow in gethostbyname functions.

binary-analysisexploitationpenetration-testing+1
111 years ago
cve-2021-21551-PoC preview

cve-2021-21551-PoC

GitHubbengabay1994/cve-2021-21551-poc

This repo contain a PoC I have done when blind analysis the dbutil_2_3.sys driver for vulnerability. This was created by personal analysis without…

binary-analysisexploitationvulnerability-analysis
10 months ago
PoC_CVE-2025-11579 preview

PoC_CVE-2025-11579

GitHubshinigami-777/poc_cve-2025-11579

Proof-of-concept exploit for CVE-2025-11579, a denial-of-service vulnerability in rardecode that triggers an out-of-memory crash via a crafted RAR…

binary-analysisexploitationfuzzing+1
11 months ago
cve-2025-54874-poc preview

cve-2025-54874-poc

GitHubcyhe50/cve-2025-54874-poc

Proof-of-concept demonstrating a memory leak in OpenJPEG 2.5.1 via crafted JP2 files, triggering opj_read_header failure and heap leak, with valgrind…

binary-analysisexploitationfuzzing+2
11 months ago
CVE-2025-60458 preview

CVE-2025-60458

GitHub0pepsi/cve-2025-60458

UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic.

binary-analysisexploitationfuzzing+1
9 months ago
bunch-of-fuzzers-developed-using-libfuzzer-and-asan preview

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

GitHubspiralbl0ck/bunch-of-fuzzers-developed-using-libfuzzer-and-asan

Collection of fuzzers built with libFuzzer and AddressSanitizer for automated bug detection in C/C++ code.

binary-analysisdynamic-analysis-sandboxingfuzzing+1
5 years ago
Previous123…35Next