Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
tomcat85-check preview

tomcat85-check

GitHubxiaoqimikko/tomcat85-check

CVE-2025-55752:Tomcat 8.5 已 EOL,终版 8.5.100。Apache 逐条声明「8.5 也受影响」的 2025 CVE 有 14 条,其中 10 条在 NVD 按 8.5.100 查不到。离线单 jar,读 conf/ 判断你到底中了哪几条。

cloud-infrastructure-securityconfiguration-auditingdevsecops+3
1 month ago
cve-2025-32711 preview

cve-2025-32711

GitHubdaryllundy/cve-2025-32711

PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…

ai-securitycloud-securityconfiguration-auditing+4
31 year ago
vibe-coding-security preview

vibe-coding-security

GitHubboxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

ai-securityapi-securityauthentication+9
152 months ago
CVE-2025-20352 preview

CVE-2025-20352

GitHubscadastrangelove/cve-2025-20352

CVE-2025-20352 SNMP Exposure Check (onesixtyone + parser)

configuration-auditinginformation-gatheringnetwork-security+2
71 year ago
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps preview

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

GitHubmrk336/from-foothold-to-domain-admin-weaponizing-cve-2025-54918-in-real-world-devops

Simulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI/CD hardening.…

cloud-securityconfiguration-auditingdevsecops+7
51 year ago
Reset-inetpub preview

Reset-inetpub

GitHubmmotti/reset-inetpub

Restore the integrity of the parent 'inetpub' folder following security implications highlighted by CVE-2025-21204.

configuration-auditingdefensive-toolsincident-response+2
31 year ago
CVE-2025-47981 preview

CVE-2025-47981

GitHubhkenzokimura/cve-2025-47981

PowerShell assessment script that checks Windows systems for CVE-2025-47981 (SPNEGO NEGOEX heap overflow) by verifying kernel version, PKU2U registry…

configuration-auditingeducationincident-response+2
1 month ago
CVE-2025-50154 preview

CVE-2025-50154

GitHubzenzue/cve-2025-50154

PowerShell toolkit to audit, harden, and hunt for insecure NTLM/SMB usage, addressing CVE-2025-50154 credential leak risks with event log analysis…

authenticationconfiguration-auditingdefensive-tools+7
31 year ago
safe-check-CVE-2025-23419 preview

safe-check-CVE-2025-23419

GitHubharley-ghostie/safe-check-cve-2025-23419

Script em python scanner safe-check da CVE-2025-23419

configuration-auditingnetwork-securityvulnerability-analysis+2
6 months ago
cve-2025-24054-lab preview

cve-2025-24054-lab

GitHubt0tooro/cve-2025-24054-lab

Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy

authenticationconfiguration-auditingeducation+7
3 months ago
CVE-2025-46295-fix-fms preview

CVE-2025-46295-fix-fms

GitHubsoliantconsulting/cve-2025-46295-fix-fms

Automated script suite to detect and remediate CVE-2025-46295 by replacing vulnerable Apache Commons JARs in FileMaker Server installations with…

configuration-auditingdevsecopsscripting-automation+3
110 months ago
sudowp-postgallery preview

sudowp-postgallery

GitHubsudo-wp/sudowp-postgallery

A security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access…

authentication-authorizationcode-analysisconfiguration-auditing+3
17 months ago
AegisJava preview

AegisJava

GitHubrashedhasan090/aegisjava

I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.

code-analysisconfiguration-auditingdevsecops+3
2 months ago
ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script preview

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

GitHubdanielmadsendk/servicenow-cve-2025-11449-cve-2025-11450-mitigation-script

Automated detection and remediation of ServiceNow UI Macro vulnerabilities (CVE-2025-11449, CVE-2025-11450) by encoding sysparm_ parameters to…

configuration-auditingdevsecopsscripting-automation+2
1 year ago
CVE-2025-32462-32463-Detection-Script- preview

CVE-2025-32462-32463-Detection-Script-

GitHubtoohau/cve-2025-32462-32463-detection-script-

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

configuration-auditingeducationexploitation+3
1 year ago
How-to-Patch-CVE-2025-32709 preview

How-to-Patch-CVE-2025-32709

GitHubadnansiyat/how-to-patch-cve-2025-32709

Real-world patching workflow for CVE-2025-32709. From hotfix install to SIEM alert validation—this repo documents every step with screenshots,…

configuration-auditingeducationincident-response+3
1 year ago
azure-vulnerability-remediation-project preview

azure-vulnerability-remediation-project

GitHubdawnsmithcyber/azure-vulnerability-remediation-project

End-to-end vulnerability management lifecycle on Azure Windows Server 2025. Features OS patching and network-level compensating controls (NSG) to…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6
16 months ago
CVE-2025-29810-check preview

CVE-2025-29810-check

GitHubaleongx/cve-2025-29810-check

Para verificar si tu entorno podría ser vulnerable al CVE-2025-29810, necesitamos hacer algunas comprobaciones básicas, como: Versión del sistema…

cloud-securityconfiguration-auditingidentity-access-management+2
1 year ago
Previous12Next