Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1161 results
Bughound preview

Bughound

GitHubmhaskar/bughound

Static code analysis tool based on Elasticsearch

code-analysisdevsecopsstatic-code-analysis+2
1305 years ago
https-nj.gov---CVE-2018-14040 preview

https-nj.gov---CVE-2018-14040

GitHubsnorlyd/https-nj.gov---cve-2018-14040

Vulnearability Report of the New Jersey official site

code-analysiseducationpapers-research+3
14 years ago
SealSecurityAssignment preview

SealSecurityAssignment

GitHubcucumberanorsncompany/sealsecurityassignment

Researching on the vulnrability CVE-2023-26136

code-analysiseducationexploitation+3
12 years ago
CVE-2023-26136 preview

CVE-2023-26136

GitHubmorrisel/cve-2023-26136

This repository contains a solution for the CVE-2023-26136 vulnerability.

code-analysiseducationpapers-research+3
1 year ago
CVE-2024-44623 preview

CVE-2024-44623

GitHubmerbinr/cve-2024-44623

Details about the Blind RCE issue(SPX-GC) in SPX-GC

code-analysiscommand-and-controlexploitation+3
2 years ago
https-nj.gov---CVE-2018-14042 preview

https-nj.gov---CVE-2018-14042

GitHubsnorlyd/https-nj.gov---cve-2018-14042

Vulnearability Report of the New Jersey official site

code-analysiseducationpapers-research+2
4 years ago
halo-2.25.4-backup-write-CVE-2026-67920 preview

halo-2.25.4-backup-write-CVE-2026-67920

GitHubunpredictable21/halo-2.25.4-backup-write-cve-2026-67920

Proof-of-concept exploit for an arbitrary file write vulnerability in Halo CMS backup restoration, enabling RCE via plugin JAR replacement or…

code-analysisexploitationpenetration-testing+3
2 months ago
CVE-2025-66478-github-patcher preview

CVE-2025-66478-github-patcher

GitHubjibaru/cve-2025-66478-github-patcher

Go-based automation tool that scans GitHub repositories for vulnerable Next.js versions (CVE-2025-66478) and automatically creates pull requests with…

code-analysisdevsecopssupply-chain-security+2
9 months ago
scorecard preview

scorecard

GitHubossf/scorecard

OpenSSF Scorecard - Security health metrics for Open Source

code-analysisconfiguration-auditingdevsecops+4
5.7k6 days ago
CVE-2025-70830 preview

CVE-2025-70830

GitHubxiaoxiaoranxxx/cve-2025-70830

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to…

code-analysisexploitationpayload-development+3
57 months ago
CVE-2024-23897 preview

CVE-2024-23897

GitHubviszsec/cve-2024-23897

Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE

code-analysisexploitationinformation-gathering+3
52 years ago
CVE-2024-1207 preview

CVE-2024-1207

GitHubsahar042/cve-2024-1207

The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all…

code-analysisexploitationpenetration-testing+3
1 year ago
bluemonday preview

bluemonday

GitHubmicrocosm-cc/bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

api-securitycode-analysisdefensive-tools+3
3.7k1 year ago
-CVE-2020-0601-ECC---EXPLOIT preview

-CVE-2020-0601-ECC---EXPLOIT

GitHubiiictech/-cve-2020-0601-ecc---exploit

CurveBall (CVE-2020-0601) - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using…

binary-exploitationcode-analysiscryptography+3
36 years ago
securitylab preview

securitylab

GitHubgithub/securitylab

Resources related to GitHub Security Lab

code-analysiscurated-resourceseducation+5
1.6k9 months ago
CurveBall preview

CurveBall

GitHubly4k/curveball

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

code-analysiscryptographyeducation+3
8896 years ago
WebGoat.NET preview

WebGoat.NET

GitHubowasp/webgoat.net

OWASP WebGoat.NET

code-analysiseducationlabs-practice+3
7313 years ago
CVE-2024-9264 preview

CVE-2024-9264

GitHubnollium/cve-2024-9264

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

code-analysisexploitationpayload-generation+4
1321 year ago
Previous1…567…65Next