Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2060 results

platform_frameworks_base_CVE-2023-21281

trinadh465/platform_frameworks_base_cve-2023-21281

Android platform framework patch for CVE-2023-21281, addressing a security vulnerability in the Android framework.

android-securitybinary-exploitationcode-analysis+2

2 years ago

OpenSSL-1_0_1g_CVE-2016-0702

trinadh465/openssl-1_0_1g_cve-2016-0702

OpenSSL 1.0.1g source code snapshot, providing SSL/TLS and general-purpose cryptography library with ciphers, digests, and X.509 certificate handling.

code-analysiscryptographyencryption-decryption-tools+3

2 years ago

CVE-2017-1000117

thelastbyte/cve-2017-1000117

Proof-of-concept exploit for CVE-2017-1000117, a remote code execution vulnerability in git clients prior to v2.14.1, demonstrating recursive clone…

code-analysiseducationexploitation+3

9 years ago

external_libexif_AOSP10_CVE-2020-0452

shaikusaf/external_libexif_aosp10_cve-2020-0452

C library for parsing, editing, and saving EXIF data, with a focus on addressing CVE-2020-0452 in AOSP10. Provides API for metadata extraction and…

binary-analysiscode-analysisexploitation+3

4 years ago

govuln-CVE-2023-47108

bahe-msft/govuln-cve-2023-47108

Analyzes and addresses CVE-2023-47108, providing vulnerability assessment and remediation guidance for affected systems.

code-analysisexploitationpenetration-testing+2

2 years ago

Openssl-1.1.1g_CVE-2022-4304

trinadh465/openssl-1.1.1g_cve-2022-4304

OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…

code-analysiscryptographyencryption-decryption-tools+3

3 years ago

log4j-vuln-coverage-check

meterianhq/log4j-vuln-coverage-check

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

code-analysisdevsecopseducation+3

3 years ago

CVE-2023-31584

rootd4ddy/cve-2023-31584

Public disclosure for CVE-2023-31584.

code-analysiseducationstatic-analysis+2

3 years ago

frameworks_base_AOSP10_r33_CVE-2023-21284

trinadh465/frameworks_base_aosp10_r33_cve-2023-21284

Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.

android-securitybinary-exploitationcode-analysis+2

2 years ago

Langflow-CVE-2025-3248-Multi-target

ill-deed/langflow-cve-2025-3248-multi-target

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…

code-analysisexploitationpenetration-testing+3

1 year ago

nahsra__antisamy_CVE-2022-29577_1-6-6-1

shoucheng3/nahsra__antisamy_cve-2022-29577_1-6-6-1

Java library for fast, configurable cleansing of untrusted HTML to prevent cross-site scripting (XSS) attacks. Uses policy-driven scanning to…

code-analysisstatic-analysisvulnerability-analysis+1

9 months ago

CVE-2007-4559

davidholiday/cve-2007-4559

Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…

code-analysiseducationexploitation+3

2 years ago

nahsra__antisamy_CVE-2017-14735_1-5-6

shoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6

Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…

api-securitycode-analysismisconfiguration+3

9 months ago

grails-javamelody-sample-app

theratpack/grails-javamelody-sample-app

Grails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.

code-analysiseducationexploitation+2

12 years ago

external_aac_AOSP10_r33_CVE-2023-21282

trinadh465/external_aac_aosp10_r33_cve-2023-21282

Analyzes and patches a specific Android vulnerability (CVE-2023-21282) in the AAC audio codec, providing a patched AOSP10 source tree for security…

binary-analysiscode-analysisexploitation+2

2 years ago

OpenSSL-1_0_1g_CVE-2015-1791

trinadh465/openssl-1_0_1g_cve-2015-1791

OpenSSL 1.0.1g source code with CVE-2015-1791 patch, providing SSL/TLS and cryptographic library for secure communications.

authentication-authorizationcode-analysiscryptography+3

2 years ago

asf__cxf_CVE-2019-17573_3-2-11

shoucheng3/asf__cxf_cve-2019-17573_3-2-11

Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.

api-securityauthentication-authorizationcode-analysis+3

1 year ago

spring-webmvc5

jaloon/spring-webmvc5

Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819

code-analysisdevsecopssupply-chain-security+2

1 year ago

Previous 1…929394…100 Next