Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

4270 results

CVE-2020-1493

0neb1n/cve-2020-1493

Technical analysis and PoC details for CVE-2020-1493, a zero-click Outlook RCE triggered by malformed MS-TNEF attachments leading to remote code…

binary-exploitationemail-securityexploitation+3

6 years ago

CVE-2026-34621

azefzafyoussef/cve-2026-34621

Research PoC demonstrating a prototype pollution and JavaScript injection chain in Adobe Acrobat Reader, enabling privileged JavaScript execution and…

binary-exploitationeducationexploitation+5

244 months ago

CVE-2020-1967

irsl/cve-2020-1967

Proof-of-concept exploit for OpenSSL CVE-2020-1967, a denial-of-service vulnerability in TLS 1.3 signature_algorithms_cert handling, with…

binary-exploitationexploitationpenetration-testing+1

206 years ago

CVE-2021-30632

crackercat/cve-2021-30632

Chrome V8 RCE exploit for CVE-2021-30632 targeting Windows systems. Tested on Chrome 91-93. Includes JS POC and in-the-wild bug analysis reference.

binary-exploitationexploitationpenetration-testing+2

144 years ago

WebKit-CVE-2016-4622

hdbreaker/webkit-cve-2016-4622

Deep-dive analysis and exploitation walkthrough of CVE-2016-4622, a WebKit JavaScriptCore memory disclosure vulnerability via Array.slice TOCTOU race…

binary-exploitationeducationexploitation+4

231 year ago

SnatchBox

liji32/snatchbox

SnatchBox (CVE-2020-27935) is a sandbox escape vulnerability and exploit affecting macOS up to version 10.15.x

binary-exploitationexploitationpayload-development+2

325 years ago

CVE-2023-20938

jaf0rk/cve-2023-20938

Technical analysis and proof-of-concept exploit for CVE-2023-20938, a use-after-free vulnerability in the Android kernel's Binder driver, enabling…

android-securitybinary-exploitationexploitation+1

134 months ago

binja_sensei

nccgroup/binja_sensei

A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and…

binary-analysisbinary-exploitationctf+4

269 years ago

CVE-2025-6554

aklnjakln/cve-2025-6554

Proof-of-concept exploit for CVE-2025-6554, demonstrating V8 sandbox escape via addressof and fakeobj primitives to achieve arbitrary read/write.…

binary-exploitationeducationexploitation+2

319 months ago

CVE-2014-4378

feliam/cve-2014-4378

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

binary-exploitationexploitationinformation-gathering+3

1811 years ago

CVE-2021-33739-POC

freeide2017/cve-2021-33739-poc

Proof-of-concept exploit for CVE-2021-33739 and CVE-2021-26868, demonstrating local privilege escalation on Windows systems through binary…

binary-exploitationexploitationpenetration-testing+2

105 years ago

CVE-2020-1054

kalendsi/cve-2020-1054

Analysis and proof-of-concept exploit code for CVE-2020-1054, a Windows kernel privilege escalation vulnerability, with technical write-up linked.

binary-exploitationexploitationreverse-engineering+1

206 years ago

AxHunter

blacksnufkin/axhunter

PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430,…

binary-exploitationexploitationpassword-attacks+3

131 month ago

CVE-2021-4034

ck00004/cve-2021-4034

Exploit for CVE-2021-4034 (pkexec) targeting CentOS 8, allowing custom command execution via modified pwnkit-dry-run.c. Includes compilation and…

binary-exploitationexploitationexploit-frameworks+2

284 years ago

CVE-2022-29968

jprx/cve-2022-29968

Exploit PoC for CVE-2022-29968 by Joseph Ravichandran and Michael Wang

binary-exploitationeducationexploitation+2

194 years ago

perl_spreadsheet_excel_rce_poc

haile01/perl_spreadsheet_excel_rce_poc

POC for RCE vulnerability in ParseExcel library, and ParseXLSX too, as a depending library

binary-exploitationcode-analysisexploitation+3

181 year ago

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

0xjohnnydev/cve-2026-28992-iohidfamily-fastpathuserclient-race-conditions

UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.

binary-exploitationexploitationios-security+5

1520 days ago

CVE-2024-6768

fortra/cve-2024-6768

Proof-of-concept exploit for CVE-2024-6768, a Windows CLFS.sys driver vulnerability causing BSoD via crafted .BLF file. Includes source code and…

binary-exploitationexploitationvulnerability-analysis

162 years ago

Previous 1…161718…100 Next