Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1790 results

CVE-2024-35106-POC

laskdjlaskdj12/cve-2024-35106-poc

Proof-of-concept exploit for CVE-2024-35106, a stack buffer overflow in NEXTU FLETA AX1500 Wi-Fi 6 router. Demonstrates denial-of-service and…

binary-exploitationembedded-systems-securityexploitation+5

1 year ago

CVE-2024-55504

syfi/cve-2024-55504

CVE-2024-55504

binary-exploitationcode-analysisexploitation+1

1 year ago

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

hunt-benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

Proof-of-concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek WLAN AP drivers. Uses scapy to send crafted Wi-Fi management…

binary-exploitationeducationembedded-systems-security+5

33 months ago

PoCForCVE-2015-1528

kanpol/pocforcve-2015-1528

Proof-of-concept exploit for CVE-2015-1528 demonstrating privilege escalation on Android 5.0 via binder call fuzzing, with staged code injection into…

android-securitybinary-exploitationexploitation+3

111 years ago

PoCForCVE-2015-1528

secmob/pocforcve-2015-1528

I'll submit the poc after blackhat

android-securitybinary-exploitationexploitation+4

11711 years ago

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

george0papasotiriou/cve-2026-6789-stack-buffer-overflow-in-embedded-tls-certificate-parser

Stack buffer overflow PoC in an embedded TLS certificate parser using a crafted X.509 SAN extension for remote code execution on IoT and industrial…

binary-exploitationeducationembedded-systems-security+3

2 months ago

CVE-2024-37742

tungdn9988/cve-2024-37742

Step-by-step reproduction guide for CVE-2024-37742, a clipboard exploit in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows, with PoC code and analysis.

binary-exploitationeducationexploitation+2

5 months ago

CVE-2017-3078

homjxi0e/cve-2017-3078

Proof-of-concept exploit for CVE-2017-3078, a memory corruption vulnerability in Adobe Flash Player ATF module enabling arbitrary code execution on…

binary-exploitationexploitationinformation-gathering+2

9 years ago

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

bhathiya404/exploiting-stagefright-vulnerability-cve-2015-3864

Exploit implementation for Android Stagefright vulnerability CVE-2015-3864, enabling remote code execution and privilege escalation on Android 5.1.1…

android-securitybinary-exploitationexploitation+5

3 years ago

CVE-2019-11395

caioprince/cve-2019-11395

Python exploit for CVE-2019-11395, a buffer overflow in MailCarrier 2.51 POP3 service. Generates a reverse shell payload via msfvenom and achieves…

binary-exploitationexploitationpayload-generation+3

2 years ago

mariadb-13-rce-lab

dinosn/mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and…

binary-exploitationdatabase-securityexploitation+5

672 months ago

cve-2015-1538-1

jduck/cve-2015-1538-1

Python exploit for CVE-2015-1538-1 targeting Stagefright's 'stsc' MP4 atom integer overflow to achieve remote code execution and a reverse shell on…

android-securitybinary-exploitationexploitation+3

20511 years ago

KernelPatch

lyravoid/kernelpatch

Patches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.

android-securitybinary-analysisbinary-exploitation+6

138 days ago

RegPwn

tracyliving606/regpwn

Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions

binary-exploitationexploitationpenetration-testing+4

44h 8m ago

CVE-2024-23740

giovannipajeu1/cve-2024-23740

Automated exploit for CVE-2024-23740 targeting Kap on macOS. Injects code via RunAsNode and enableNodeClilnspectArguments to spawn a remote shell.

binary-exploitationexploitationpayload-generation+3

2 years ago

CVE-2023-1829

lanleft/cve-2023-1829

Linux kernel local privilege escalation exploit for CVE-2023-1829, targeting Ubuntu 22.04 with netfilter filter functions. Includes build…

binary-exploitationexploitationexploit-frameworks+2

732 years ago

CVE-2025-9267

tiger3080/cve-2025-9267

Seagate Toolkit for Windows (Installer <2.35.0.6) is vulnerable to insecure DLL loading. The installer loads DLLs from the working directory without…

binary-exploitationexploitationprivilege-escalation+2

1 year ago

exploits

rlarabee/exploits

C-language exploit code collection focused on vulnerability research, proof-of-concept development, and offensive security testing.

binary-exploitationexploitationvulnerability-analysis

968 years ago

Previous12…100 Next