Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2060 results
frameworks_av_AOSP10_r33_CVE-2020-0160 preview

frameworks_av_AOSP10_r33_CVE-2020-0160

GitHubnanopathi/frameworks_av_aosp10_r33_cve-2020-0160
android-securitybinary-exploitationcode-analysis+2
4 years ago
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS preview

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss

CVE-2021-46071 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in…

code-analysisexploitationpenetration-testing+3
3 months ago
go-get-rce preview

go-get-rce

GitHubd4rkshell/go-get-rce

CVE-2018-6574

code-analysisexploitationpenetration-testing+2
7 years ago
CVE-2025-48384-POC preview

CVE-2025-48384-POC

GitHubfishyyh/cve-2025-48384-poc

Proof-of-concept exploit for CVE-2025-48384, demonstrating remote code execution via a crafted git clone operation on vulnerable Git versions.

code-analysiseducationexploitation+2
1 year ago
CVE-2019-5418-Rails3 preview

CVE-2019-5418-Rails3

GitHubztgrace/cve-2019-5418-rails3

Rails 3 PoC of CVE-2019-5418

code-analysisexploitationpenetration-testing+2
3 years ago
whitesource__curekit_CVE-2022-23082_1-1-3 preview

whitesource__curekit_CVE-2022-23082_1-1-3

GitHubshoucheng3/whitesource__curekit_cve-2022-23082_1-1-3

Java security library providing contextual encoders and sanitizers to automatically remediate vulnerabilities like XSS, path traversal, and command…

code-analysisdevsecopsencryption-decryption-tools+3
1 year ago
CVE-2018-7211-PoC preview

CVE-2018-7211-PoC

GitHubc3r34lk1ll3r/cve-2018-7211-poc

Proof-of-concept exploit for CVE-2018-7211 targeting iDashboards 9.6b. Python script for encrypting/decrypting strings to demonstrate the…

code-analysisexploitationpenetration-testing+2
8 years ago
POC-CVE-2018-6574 preview

POC-CVE-2018-6574

GitHubkilltr0/poc-cve-2018-6574

Proof-of-concept exploit for CVE-2018-6574 targeting a Go web server vulnerability. Demonstrates remote code execution via crafted HTTP requests.

code-analysisexploitationpenetration-testing+2
5 years ago
CVE-2017-13286 preview

CVE-2017-13286

GitHubumvfx1bvaw50/cve-2017-13286

CVE-2017-13286 Poc(can not use)

android-securitybinary-exploitationcode-analysis+3
2 years ago
Confluence-CVE-2021-26084 preview

Confluence-CVE-2021-26084

GitHub30579096/confluence-cve-2021-26084

OGNL Injection in Confluence server version < 7.12.5

code-analysisexploitationpenetration-testing+2
5 years ago
PowerShellProfiler preview

PowerShellProfiler

GitHubal1ex/powershellprofiler

PowerShellProfiler

code-analysisforensicsmalware-analysis+2
5 years ago
CVE-2018-6574 preview

CVE-2018-6574

GitHubseoqqq/cve-2018-6574

Remote command execution in Golang go get command allows an attacker to gain code execution on a system by installing a malicious library.

binary-exploitationcode-analysisexploitation+2
3 years ago
webp_Android10_r33_CVE-2023-1999 preview

webp_Android10_r33_CVE-2023-1999

GitHubpazhanivelmani/webp_android10_r33_cve-2023-1999

Proof-of-concept exploit for CVE-2023-1999 targeting the WebP codec library on Android 10 (r33). Demonstrates a heap buffer overflow vulnerability in…

binary-analysiscode-analysisexploitation+3
1 year ago
CVE-2020-10673 preview

CVE-2020-10673

GitHubharry1080/cve-2020-10673

CVE-2020-10673

code-analysisexploitationstatic-analysis+2
6 years ago
CVE-2013-3900 preview

CVE-2013-3900

GitHubsabecomoeh/cve-2013-3900

Proof-of-concept exploit for CVE-2013-3900, a WinVerifyTrust signature validation vulnerability enabling arbitrary code execution via crafted…

binary-analysiscode-analysisexploitation+1
1 year ago
CVE-2013-0156 preview

CVE-2013-0156

GitHubr3dkn33-zz/cve-2013-0156

Arbitrary deserialization that can be used to trigger SQL injection and even Code execution

code-analysisexploitationpenetration-testing+2
7 years ago
batchOverflow preview

batchOverflow

GitHubphzietsman/batchoverflow

A fix for the batchOverflow bug https://medium.com/@peckshield/alert-new-batchoverflow-bug-in-multiple-erc20-smart-contracts-cve-2018-10299-511067db65…

code-analysiseducationstatic-analysis+1
8 years ago
CVE-2024-42461 preview

CVE-2024-42461

GitHubfevar54/cve-2024-42461

Fix for ECDSA and EDDSA signature verification in Wycheproof project, addressing missing length checks that allowed zero-byte manipulation during…

code-analysiscryptographyencryption-decryption-tools+2
2 years ago
Previous1…909192…100Next