Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

549 results

log4shell-CVE-2021-44228

rh-rahulshetty/log4shell-cve-2021-44228

Deliberately vulnerable Java/Maven fixture for testing Log4Shell (CVE-2021-44228) detection, code-impact classification, and remediation guidance in…

code-analysisdevsecopseducation+4

14 days ago

CVE-2021-29505

myblackmanba/cve-2021-29505

对CVE-2021-29505进行复现，并分析学了下Xstream反序列化过程

binary-exploitationcode-analysiseducation+3

65 years ago

CVE-2026-72530-TrueConf-Sandbox-Escape-

fevar54/cve-2026-72530-trueconf-sandbox-escape-

Este repositorio contiene una demostración educativa de la mitigación y detección para **CVE-2026-72530**, una vulnerabilidad crítica de **Code…

code-analysiseducationexploitation+2

1 month ago

CVE-2026-14361

0xmrma/cve-2026-14361

Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output…

code-analysiseducationexploitation+1

1 month ago

Office-Malware-Forensics-Lab-REMnux-Static-Analysis

mo200909/office-malware-forensics-lab-remnux-static-analysis

Static analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.

code-analysisdigital-forensicseducation+6

14 days ago

Fern Pattern Scanner

gitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scanner

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…

code-analysisdevsecopseducation+3

52 years ago

CVE-2020-8277

masahiro331/cve-2020-8277

Proof-of-concept exploit for CVE-2020-8277, a Node.js DNS resolver denial-of-service vulnerability triggered by large record responses, with…

code-analysiseducationexploitation+1

75 years ago

CVE-2021-2471

cckuailong/cve-2021-2471

Maven-based reproduction environment for CVE-2021-2471, demonstrating JDBC SQLXML XXE exploitation with step-by-step guide and reference code.

code-analysiseducationexploitation+2

34 years ago

CVE-2026-63030-Wp2Shell

ghostinexile/cve-2026-63030-wp2shell

WordPress REST API SQLi to RCE PoC (CVE-2026-63030 & CVE-2026-60137)

code-analysiseducationexploitation+3

42 months ago

CVE-2020-8840

veraxy00/cve-2020-8840

Jackson-databind远程代码执行漏洞（CVE-2020-8840）分析复现环境代码

code-analysiseducationexploitation+3

45 years ago

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

alewong/php-fpm-remote-code-execution-vulnerability-cve-2019-11043-

PHP-FPM Remote Code Execution Vulnerability (CVE-2019-11043) POC in Python

code-analysiseducationexploitation+3

46 years ago

react2shell-lab

alsaut1/react2shell-lab

CVE-2025-55182 React2Shell PoC lab

code-analysisctfeducation+7

79 months ago

CVE-2023-32571-POC

tris0n/cve-2023-32571-poc

Proof-of-concept for CVE-2023-32571, demonstrating remote code execution via Dynamic Linq injection in ASP.NET applications. Includes payloads and a…

code-analysiseducationexploitation+4

72 years ago

ReactOOPS-WriteUp

thestingr/reactoops-writeup

Hack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182/CVE-2025-66478 (React2Shell RCE).…

code-analysisctfeducation+8

79 months ago

CVE-2024-4879

gh-ost00/cve-2024-4879

Proof-of-concept exploit for CVE-2024-4879, a Jelly template injection vulnerability in ServiceNow enabling unauthenticated remote code execution.…

code-analysiseducationexploitation+3

42 years ago

wp2shell

crypto-cat/wp2shell

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell

code-analysiseducationexploitation+2

32 months ago

chub-supply-chain-poc

mickmicksh/chub-supply-chain-poc

Silent dependency injection through AI documentation pipelines. 240 isolated Docker runs proving Context Hub's zero-sanitization MCP server lets…

ai-securitycode-analysiseducation+5

46 months ago

CVE-2024-53924

aelmosalamy/cve-2024-53924

A PoC of CVE-2024-53924

code-analysiseducationexploitation+3

51 year ago

Previous 1…8910…31 Next