Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

22 results

CVE-2026-0073

umarrehmansiddiqui/cve-2026-0073

Proof-of-concept exploit for an Android adbd Wireless Debugging TLS auth bypass, using an EC/RSA key type mismatch to obtain an unauthenticated…

android-securityauthenticationcryptography+5

2 days ago

openmeetings-remember-me-password

abraxas/openmeetings-remember-me-password

Apache OpenMeetings 9.1.0 - High - Remote - ATO - remember-me cookie replay authenticates without password

authenticationcryptographyexploitation+3

11 days ago

pfsense-api-enroll-autoadd

abraxas/pfsense-api-enroll-autoadd

pfSense Plus MIM API toolkit b4acd7ca - High - Remote - Privilege leftover - Paramiko AutoAddPolicy enroll

authenticationcryptographyexploitation+6

13 days ago

vsftpd-ssl-data-any-ticket

abraxas/vsftpd-ssl-data-any-ticket

vsftpd 3.0.5 - High - Remote - Privilege leftover - FTPS data accepts any resumed ticket

cryptographyexploitationlabs-practice+5

15 days ago

CVE-2026-100835

murrez/cve-2026-100835

Python PoC for CVE-2026-100835: audits Contrast manifests for AllowedChipIDs/AllowedPIIDs, detects versions, and probes Coordinator endpoints to…

authenticationcloud-securitycontainer-security+5

1 month ago

cve-2026-19445-sni-uaf

abraxas/cve-2026-19445-sni-uaf

Proof-of-concept lab for CVE-2026-19445, a CPython ssl SNI SSLContext use-after-free where a remote TLS client frees the server's dispatch context…

cryptographydynamic-analysis-sandboxingexploitation+4

21 days ago

attezt

foxboron/attezt

An open-source TPM device-attest-01 CA server

authenticationcryptographydefensive-tools+6

7625 days ago

ultrablue

anssi-fr/ultrablue

User-friendly Lightweight TPM Remote Attestation over Bluetooth

authenticationbluetooth-securitycryptography+2

1743 years ago

openssh-portable

openssh/openssh-portable

Portable OpenSSH

authenticationcryptographynetwork-security+1

4.1k2 days ago

Loki

bitwise-01/loki

Remote Access Tool

command-and-controlcryptographyeducation+4

6294 years ago

apache__mina-sshd_CVE-2023-35887_2-9-2

shoucheng3/apache__mina-sshd_cve-2023-35887_2-9-2

Pure Java SSH client/server library implementing SSH-2 protocol with support for multiple ciphers, key exchanges, authentication methods, SFTP, SCP,…

authenticationcryptographyencryption-decryption-tools+5

1 year ago

OpenSSL_DTLS_CVE_2014_0221

tpdlshdmlrkfmcla/openssl_dtls_cve_2014_0221

OpenSSL DTLS CVE-2014-0221 Remote Denial

cryptographyexploitationnetwork-security+2

1 year ago

CVE-2020-1971

mbhudson/cve-2020-1971

CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script.

cryptographyeducationexploitation+2

75 years ago

CVE-2026-29114

crimsonfiedofficial/cve-2026-29114

Dahua CVE-2026-29114

cryptographyeducationhardware-security+3

13 months ago

apache__activemq_CVE-2020-11998_5-15-12

shoucheng3/apache__activemq_cve-2020-11998_5-15-12

Exploit for CVE-2020-11998 targeting Apache ActiveMQ 5.15.12, enabling remote code execution via crafted messages to the vulnerable message broker.

cryptographyexploitationnetwork-security+3

1 year ago

dp_cryptomg

blacklanternsecurity/dp_cryptomg

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

cryptographyexploitationpenetration-testing+3

611 day ago

BlackBerryC2

dereeqw/blackberryc2

Encrypted command‑and‑control (C2) research framework for cybersecurity education, red team labs, and secure client‑server communication experiments.

command-and-controlcryptographyeducation+7

327 months ago

tfc

maqp/tfc

Tinfoil Chat - Onion-routed, endpoint secure messaging system

cryptographyencryption-decryption-toolshardware-security+1

1.3k3 months ago

Previous12 Next