Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2141 results

Research_Successful_Errors

vladko312/research_successful_errors

Whitepaper introducing Error-Based and Boolean Error-Based Blind techniques for SSTI and Code Injection, with universal payloads for six programming…

code-analysisctfeducation+6

124

7 months ago

PulseAPK

deemoun/pulseapk

PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

android-securitybinary-analysiscode-analysis+5

1155 months ago

comission

intrinsec/comission

White-box CMS security scanner that audits core, plugin, and theme versions, detects unauthorized modifications, and cross-references known…

code-analysisconfiguration-auditingvulnerability-scanners+1

686 years ago

Veritensor

arsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

ai-securitycode-analysisdata-exfiltration+8

882 months ago

react2shell

freeqaz/react2shell

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

code-analysisdynamic-analysis-sandboxingeducation+6

6910 months ago

oversight

rakosn1cek/oversight

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

code-analysisdevsecopsdynamic-analysis-sandboxing+7

392 months ago

sigmalite

runreveal/sigmalite

Go library for parsing and executing Sigma detection rules against log entries, supporting field modifiers, CIDR matching, and custom field resolvers…

code-analysisintrusion-detectionlog-analysis+2

591 year ago

tooling-playground

dr4k0nia/tooling-playground

A collection of small scripts and tools for deobfuscation and malware analysis.

code-analysismalware-analysisreverse-engineering+1

673 years ago

vue-template-compiler-patched

bio/vue-template-compiler-patched

Patched Vue 2.7.16 template compiler with fixes for CVE‑2024‑6783 and CVE-2024-9506

code-analysisgeneral-purpose-utilitiesstatic-analysis+2

242 months ago

rustproofing-linux

nccgroup/rustproofing-linux

Educational examples porting Linux kernel vulnerabilities to Rust, featuring intentionally vulnerable code and exploits for learning kernel security…

binary-exploitationcode-analysiscurated-resources+4

223 years ago

CVE-2026-0776

whenx/cve-2026-0776

Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.

code-analysiseducationexploitation+2

92 months ago

cve-2022-22947-spring-cloud-gateway

enokiy/cve-2022-22947-spring-cloud-gateway

Detailed analysis and exploit for CVE-2022-22947, a remote code execution vulnerability in Spring Cloud Gateway via SpEL injection in the Actuator…

code-analysiseducationexploitation+4

184 years ago

AtomShields

elevenpaths/atomshields

Security testing framework for repositories and source code

code-analysisdevsecopsmisconfiguration+3

108 years ago

CVE-2018-11235-DEMO

chybeta/cve-2018-11235-demo

Demonstrates exploitation of CVE-2018-11235, a Git submodule RCE vulnerability, with build script and analysis for educational purposes.

code-analysiseducationexploitation+2

148 years ago

CVE-2022-0853

bytehackr/cve-2022-0853

Demonstrates a memory leak in JBoss client when using UserTransaction repeatedly, with a PoC and analysis for CVE-2022-0853.

code-analysisdebuggersexploitation+2

94 years ago

CVE-2020-28948-and-CVE-2020-28949

0x240x23elu/cve-2020-28948-and-cve-2020-28949

Proof-of-concept demonstration for CVE-2020-28948 and CVE-2020-28949, PHP Archive_Tar path traversal and arbitrary file write vulnerabilities.

code-analysiseducationexploitation+2

65 years ago

advisory

carlosalbertotuma/advisory

Public security advisories and PoCs for vulnerabilities discovered in open-source web software, with root-cause analysis, CVE references,…

code-analysiscurated-resourceseducation+7

214 days ago

CVE-2024-11393

piyush-bhor/cve-2024-11393

Technical Details and Exploit for CVE-2024-11393

binary-exploitationcode-analysiseducation+3

41 year ago

Previous 123…100 Next