Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

97 results

exch_CVE-2021-42321

7bitsteam/exch_cve-2021-42321

Modified .NET deserialization payload for CVE-2021-42321, based on ysoserial.net, that writes files and bypasses Windows Defender to target Microsoft…

binary-exploitationexploitationpayload-development+3

4 years ago

CVE-2017-14980_syncbreeze_10.0.28_bof

lipeozyy/cve-2017-14980_syncbreeze_10.0.28_bof

Proof-of-concept buffer overflow exploit for Sync Breeze Enterprise v10.0.28 (CVE-2017-14980). Sends crafted HTTP POST payload to overwrite EIP and…

binary-exploitationexploitationpayload-generation+4

21 year ago

CVE-2018-4121

likekabin/cve-2018-4121

Proof-of-concept remote code execution exploit for Safari 11.0.3 on macOS 10.13.3, leveraging a WebAssembly section vulnerability with heap spray and…

binary-exploitationexploitationpayload-development+2

8 years ago

CVE-2018-4121

jezzus/cve-2018-4121

Proof-of-concept remote code execution exploit targeting Safari 11.0.3 on macOS 10.13.3 via a WebAssembly section vulnerability (CVE-2018-4121).…

binary-exploitationexploitationpayload-development+3

8 years ago

CVE-2020-27955

arnoldqqq/cve-2020-27955

Exploit for CVE-2020-27955, a Git LFS remote code execution vulnerability, with a .bat/powershell payload targeting Windows Git clients.

binary-exploitationexploitationpayload-development+3

5 years ago

CVE-2020-27955-LFS

kimorea/cve-2020-27955-lfs

Windows RCE exploit for CVE-2020-27955 targeting git-lfs, affecting GitHub Desktop, VS Code, and other Git clients via crafted .bat/powershell…

binary-exploitationexploitationpayload-development+3

3 years ago

CVE-2026-91737

sm1ee/cve-2026-91737

Proof-of-concept for CVE-2026-91737, a PDFium use-after-free in Chrome's PDF renderer enabling ASLR bypass and ARM64 payload execution inside the…

binary-exploitationexploitationpayload-development+3

824 days ago

Nginx-Rift

depthfirstdisclosures/nginx-rift

NGINX RCE exploits

binary-exploitationexploitationpayload-development+3

9173 months ago

pwn2own2020

sslab-gatech/pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

binary-exploitationexploitationpayload-development+4

4145 years ago

cnext-exploits

ambionics/cnext-exploits

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

binary-exploitationexploitationpayload-development+3

5052 years ago

CVE-2017-11882

rip1s/cve-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

binary-exploitationexploitationpayload-generation+4

3308 years ago

CVE-2023-21608

hacksysteam/cve-2023-21608

Proof-of-concept exploit for CVE-2023-21608, a Use-After-Free vulnerability in Adobe Acrobat Reader enabling remote code execution via crafted PDF…

binary-exploitationexploitationpayload-development+3

2832 years ago

PS4-6.20-WebKit-Code-Execution-Exploit

cryptogenic/ps4-6.20-webkit-code-execution-exploit

A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

binary-exploitationexploitationpayload-development+3

2097 years ago

CVE-2020-0674-Exploit

maxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

binary-exploitationexploitationpayload-generation+3

2226 years ago

POC-for-CVE-2023-41993

po6ix/poc-for-cve-2023-41993

Proof-of-concept exploit for CVE-2023-41993, a WebKit JIT type confusion in Safari. Provides addrof/fakeobj primitives via heap manipulation and…

binary-exploitationexploitationpayload-development+2

2023 years ago

BadKernel

secmob/badkernel

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

binary-exploitationexploitationpayload-development+3

1519 years ago

CVE-2022-28672

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

binary-exploitationexploitationpayload-development+3

1212 years ago

cve-2018-4233

saelo/cve-2018-4233

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

binary-exploitationexploitationpayload-development+3

1782 years ago

Previous12 3 4 5 6 Next