Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

142 results

CVE-2024-57366

h4ckusaur/cve-2024-57366

Remote code execution exploit for CVE-2024-57366 targeting WAVLINK routers via MAC address validation bypass and command injection, with automatic…

command-and-controlexploitationiot-security+6

11 months ago

CVE-2025-3248

r0otk3r/cve-2025-3248

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…

command-and-controlexploitationpayload-development+5

11 year ago

CVE-2025-24813-PoC

tonyarris/cve-2025-24813-poc

A PoC for CVE-2025-24813

command-and-controlexploitationpayload-generation+4

11 year ago

CVE-2022-22980

eliasdekiniweek/cve-2022-22980

Exploitation de CVE-2022-22980

command-and-controlctfeducation+3

16 months ago

LibSSH-exploit

kurlee/libssh-exploit

Takes advantage of CVE-2018-10933

command-and-controlexploitationpenetration-testing+2

7 years ago

CVE-Exploit-Research-Development

faizan8232403/cve-exploit-research-development

A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with…

command-and-controleducationexploitation+2

5 months ago

PDFkit-CMD-Injection

lekosbelas/pdfkit-cmd-injection

Proof-of-concept exploit for CVE-2022-25765 demonstrating command injection in pdfkit 0.8.6 via unsanitized URL parameter, enabling remote code…

command-and-controlexploitationpayload-generation+2

3 years ago

CVE-2023-26866

lionelmusonza/cve-2023-26866

Proof-of-concept exploit for CVE-2023-26866: remote command injection in GreenPacket WR-1200 and OT-235 routers enabling pre-login root-level device…

command-and-controlexploitationprivilege-escalation+3

3 years ago

CVE-2023-51385-

thinkliving2020/cve-2023-51385-

CVE-2023-51385

command-and-controleducationexploitation+3

2 years ago

CVE-2014-6271-SHELLSHOCK

yunchohang/cve-2014-6271-shellshock

Automation script to exploit the Shellshock vulnerability.

command-and-controleducationexploitation+3

1 year ago

CVE-2025-26055

rohan-pt/cve-2025-26055

CVE Description

command-and-controlexploitationpenetration-testing+2

1 year ago

CVE-2019-10149

hyim0810/cve-2019-10149

CVE-2019-10149

command-and-controleducationexploitation+3

2 years ago

TimeInjector

breadsquad/timeinjector

Time injector is a CVE-2018-14714 exploitation script

command-and-controlexploitationpenetration-testing+2

1 year ago

CVE-2024-10914

egi08/cve-2024-10914

CVE-2024-10914_Manual testing with burpsuite

command-and-controlexploitationpenetration-testing+3

1 year ago

CVE-2026-0709

snipersmaster/cve-2026-0709

Python proof-of-concept for authenticated command injection in Hikvision wireless APs, enabling remote code execution testing with customizable…

command-and-controlexploitationpenetration-testing+3

5 months ago

CVE-2023-51126

risuxx/cve-2023-51126

Proof-of-concept for command injection vulnerability in FLIR AX8 camera, demonstrating remote code execution via /usr/www/res.php.

command-and-controlexploitationpenetration-testing+2

12 years ago

Previous 1…78Next