Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

120 results

CVE-2026-39047

j4ck3lsyn-gen2/cve-2026-39047

Epson Printer RAW Protocol Exploit Framework

binary-exploitationembedded-systems-securityexploitation+9

3 months ago

CVE-2022-44268

mouftan/cve-2022-44268

Python-based exploit for CVE-2022-44268, an arbitrary file read vulnerability in ImageMagick. Poisons PNG images to read sensitive files from…

binary-exploitationexploitationinformation-gathering+2

1 year ago

libc-database

niklasb/libc-database

Build a database of libc offsets to simplify exploitation

binary-exploitationctfexploitation+2

1.9k1 month ago

CTFs

adamkadaban/ctfs

CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done

binary-exploitationcryptographyctf+9

86410 months ago

Explosive-As-Hell-MCS-Qualifer-Web-500

abdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

binary-exploitationctfeducation+7

5 months ago

PoC

mcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5

7813 years ago

exploits

hackerhouse-opensource/exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

binary-exploitationcurated-resourcesembedded-systems-security+7

4707 months ago

vucsa

warxim/vucsa

Deliberately vulnerable client-server application for learning penetration testing of non-HTTP thick clients. Includes challenges for SQL injection,…

binary-exploitationctfeducation+3

1033 years ago

CVE-2023-36874

d0rb/cve-2023-36874

This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error…

binary-exploitationeducationexploitation+1

792 years ago

CVE-2026-42945-POC

cipherspy/cve-2026-42945-poc

exploit for CVE-2026-42945

binary-exploitationcommand-and-controlctf+7

644 months ago

Interview_Tips

jigerjain/interview_tips

Summary of Cyber Security interview questions I have been through, hope this helps

binary-exploitationcloud-securitycryptography+5

716 years ago

CVE-2026-42533

imbas007/cve-2026-42533

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

binary-exploitationexploitationinformation-gathering+4

352 months ago

CVE-2025-53136

nu1lptr0/cve-2025-53136

Kernel Information Disclosure

binary-exploitationexploitationinformation-gathering+1

358 months ago

VectorFreed

rafabd1/vectorfreed

Documents the VectorFreed librsvg use-after-free RCE chain (CVE-2026-96889) with an SVG generator PoC and remediation guidance for librsvg, Next.js,…

binary-exploitationexploitationinformation-gathering+4

175 days ago

CVE-2018-4901

bigric3/cve-2018-4901

crash poc & Leak info PoC

binary-exploitationexploitationinformation-gathering+2

168 years ago

VirtualBox-6.0.0-Exploit-1-day

wotmd/virtualbox-6.0.0-exploit-1-day

CVE-2019-2525 / CVE-2019-2548

binary-exploitationexploitationinformation-gathering+3

126 years ago

ThrottleStop

demoo1337/throttlestop

CVE-2025-7771 ThrottleStop.sys privilege escalation exploit - unrestricted IOCTL access to physical memory via MmMapIoSpace

binary-exploitationexploitationexploit-frameworks+3

111 year ago

CVE-2026-33439

themalwareguardian/cve-2026-33439

First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).

binary-exploitationcode-analysiseducation+8

105 months ago

Previous12 3 4 5 6 7 Next