Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

147 results

kasld

bcoles/kasld

KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration,…

binary-exploitationctfexploitation+3

55319h 1m ago

CVE-2023-0386

chenaotian/cve-2023-0386

Local privilege escalation exploit for CVE-2023-0386 targeting Linux kernel overlayfs. Includes detailed vulnerability analysis, PoC code, and…

binary-exploitationeducationexploitation+3

1233 years ago

winmagic_sd

patois/winmagic_sd

Technical Write-Up on and PoC Exploit for CVE-2020-11519 and CVE-2020-11520

binary-exploitationeducationexploitation+4

123 years ago

CVE-2013-2028-Exploit

vanivamshi/cve-2013-2028-exploit

Docker-based lab and Python exploit for CVE-2013-2028, an Nginx 1.3.9 chunked-parser integer overflow, covering canary recovery, mprotect, and…

binary-exploitationeducationexploitation+6

16 days ago

cpiopwn

fangqyi/cpiopwn

ACE poc exploit for glibc cpio 2.13 through mmap chunk metadata curruption (CVE-2021-38185)

binary-exploitationeducationexploitation+3

55 years ago

CVE-2026-9256-Poc

3nou9h/cve-2026-9256-poc

Demonstrates CVE-2026-9256 heap buffer overflow in nginx's ngx_http_rewrite_module with PoC scripts for heap/libc leaks and worker crash.

binary-exploitationeducationexploitation+3

34 months ago

CVE-2026-27495

dexsemon/cve-2026-27495

Proof-of-concept exploit and lab environment for CVE-2026-27495

binary-exploitationcode-analysiseducation+3

2 months ago

CVE-2026-31431-CopyFail

0xfuffm3/cve-2026-31431-copyfail

Proof-of-concept exploit for CVE-2026-31431 (Copy Fail), a Linux kernel LPE via algif_aead page-cache corruption, with detection, lab, and mitigation…

binary-exploitationcontainer-escapeeducation+5

4 months ago

Learning-History-of-CFF-bug-in-iphone

spiralbl0ck/learning-history-of-cff-bug-in-iphone

Dive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun

binary-analysisbinary-exploitationeducation+3

12 years ago

php-exploit_cve-2022-31630

sepkascurty-cpu/php-exploit_cve-2022-31630

Proof-of-concept exploit for CVE-2022-31630, an out-of-bounds read vulnerability in PHP's GD extension. Demonstrates crash and memory disclosure in…

binary-exploitationeducationexploitation+2

16 months ago

bouncer-overflow

nicolasjulian/bouncer-overflow

Working POC of CVE-2026-6664 written by Sonnet 4.6

binary-exploitationdatabase-securityeducation+3

4 months ago

CVE-2026-41901

horkimhab/cve-2026-41901

CVE-2026-41901

binary-exploitationcontainer-escapeeducation+5

4 months ago

cve-2026-42945-nginx32-lab

dinosn/cve-2026-42945-nginx32-lab

CVE-2026-42945 nginx 32-bit exploit lab ASLR enabled

binary-exploitationctfeducation+5

34 months ago

CVE-2019-5736

likekabin/cve-2019-5736

Destructive Docker container escape exploit for CVE-2019-5736, overwriting host /usr/bin/docker-runc with a payload triggered via docker exec.

binary-exploitationcontainer-escapeexploitation+3

17 years ago

LiveCTF-DEFCON30

live-ctf/livectf-defcon30

Collection of DEF CON 30 CTF challenge binaries, build scripts, and solve scripts for practicing binary exploitation and reverse engineering.

binary-exploitationctfexploitation+2

1141 month ago

CVE-2026-42945-POC

cipherspy/cve-2026-42945-poc

exploit for CVE-2026-42945

binary-exploitationcommand-and-controlctf+7

644 months ago

ptrace_may_dream

sgkdev/ptrace_may_dream

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

binary-exploitationcontainer-escapeexploitation+4

214 months ago

CVE-2024-48208

rohilchaudhry/cve-2024-48208

This repo contains all the work surrounding the development of the PoC for CVE-2024-48208, and how a simple OOB(Out-of-bound) read can result in jail…

binary-exploitationexploitationpenetration-testing+3

71 year ago

Previous 1…345…9 Next