Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

4268 results

CVE-2021-3156

blasty/cve-2021-3156

Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and…

binary-exploitationexploitationpayload-development+3

1.0k

5 years ago

kfd

felix-pb/kfd

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

binary-exploitationexploitationios-security+1

1.0k2 years ago

PoC

mcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5

7823 years ago

spectre-attack

eugnis/spectre-attack

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

binary-exploitationeducationexploitation+3

7718 years ago

pwninit

io12/pwninit

Automates setup of binary exploitation challenges by patching ELF binaries, fetching matching linkers, unstripping libc, and generating pwntools…

binary-exploitationctfexploitation+2

1.1k1 month ago

exploit_mitigations

nccgroup/exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

binary-exploitationcurated-resourceseducation+2

9302 years ago

Januscape

v4bel/januscape

KVM/x86 guest-to-host escape exploit (CVE-2026-53359) leveraging a use-after-free in shadow MMU emulation. Includes PoC for triggering host kernel…

binary-exploitationcloud-securityexploitation+4

5601 month ago

ExtractKeyMaster

laginimaineb/extractkeymaster

Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

android-securitybinary-exploitationembedded-systems-security+4

36310 years ago

exploits

0xdea/exploits

Public exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel,…

binary-exploitationdatabase-securityexploitation+3

6768 months ago

CVE-2022-0847-DirtyPipe-Exploits

alexisahmed/cve-2022-0847-dirtypipe-exploits

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

binary-exploitationexploitationpenetration-testing+3

7343 years ago

ExploitGSM

yuriicrimson/exploitgsm

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

binary-exploitationexploitationprivilege-escalation

8512 years ago

CVE-2022-29072

kagancapar/cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents…

binary-exploitationcommand-and-controlexploitation+5

6724 years ago

DDexec

arget13/ddexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

binary-exploitationpayload-generationpenetration-testing+3

8991 year ago

bad-epoll

j-jaeyoung/bad-epoll

Linux kernel privilege-escalation exploit for CVE-2026-46242, a race-condition use-after-free in epoll, with 99% reliable root on desktops, servers,…

android-securitybinary-exploitationctf+4

5172 months ago

android-kernel-exploitation

cloudfuzz/android-kernel-exploitation

Hands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.

android-securitybinary-exploitationeducation+4

6504 years ago

Mergen

nac-l/mergen

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

binary-analysisbinary-exploitationdynamic-analysis-sandboxing+2

9004 months ago

kasld

bcoles/kasld

KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration,…

binary-exploitationctfexploitation+3

5476h 36m ago

files

phoenhex/files

Curated repository of exploits, proof-of-concept code, and vulnerability research presentations from the phoenhex team, focused on binary…

binary-exploitationctfexploitation+3

5196 years ago

Previous 1…345…100 Next