Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
149 results
messari-crack preview

messari-crack

GitHubtimuronlinq/messari-crack

Cracking utility to bypass premium access controls on Messari's research platform, enabling unauthorized access to premium reports and real-time…

authenticationcryptographyexploitation+3
219
14 days ago
Principal-HackTheBox preview

Principal-HackTheBox

GitHubledksv/principal-hackthebox

Detailed walkthrough of exploiting CVE-2026-29000 in pac4j-jwt to bypass authentication, extract credentials from API settings, and escalate…

authenticationcryptographyctf+5
4 months ago
CVE-2025-56801 preview

CVE-2025-56801

GitHubshinycolumn/cve-2025-56801

AES-CFB IV Generation Vulnerability in Reolink Desktop Application

cryptographyeducationexploitation+2
10 months ago
CVE-2024-53522 preview

CVE-2024-53522

GitHubsafecloudth/cve-2024-53522

Proof-of-concept exploit for CVE-2024-53522, demonstrating decryption of HOSxP XE database credentials using a static hard-coded private key-IV.

cryptographyeducationexploitation+2
31 year ago
CVE-2026-26012 preview

CVE-2026-26012

GitHubdulieno/cve-2026-26012

Proof-of-concept exploit for CVE-2026-26012, a broken access control in Vaultwarden that allows any organization member to enumerate and decrypt all…

cryptographyeducationexploitation+3
16 months ago
break-golf preview

break-golf

GitHubtrailofbits/break-golf

Cryptanalysis golf: break schemes and prove it in Lean 4. Proof-of-concept board.

cryptographyctfeducation+2
9 days ago
crypto-attacks preview

crypto-attacks

GitHubjvdsn/crypto-attacks

Python implementations of cryptographic attacks and utilities.

cryptographyctfeducation+2
1.3k7 months ago
CTF-s-Tools preview

CTF-s-Tools

GitHubph4l4nx/ctf-s-tools

Repository to index useful tools for CTF's

cryptographyctfcurated-resources+9
297 months ago
GlacierCTF2023_writeups preview

GlacierCTF2023_writeups

GitHublosfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

binary-exploitationcryptographyctf+4
162 years ago
bitcoin-security preview

bitcoin-security

GitHubxaxis/bitcoin-security

Educational study of Bitcoin key entropy: weak-RNG wallet enumeration (Milk Sad / CVE-2023-39910 class) vs. the infeasibility of brute-forcing a good…

cryptographyeducationvulnerability-analysis
20 days ago
Shellcrypt preview

Shellcrypt

GitHubiilegacyyii/shellcrypt

A QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods.

cryptographyencryption-decryption-toolspayload-development+3
2173 years ago
Challenges_2022_Public preview

Challenges_2022_Public

GitHubdownunderctf/challenges_2022_public

Files + Writeups for DownUnderCTF 2022 Challenges

binary-exploitationcryptographyctf+6
2473 years ago
CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery preview

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

GitHubgeorge0papasotiriou/cve-2026-11110-aes-gcm-nonce-reuse-leading-to-key-recovery

Demonstrates AES-GCM nonce-reuse exploitation by collecting same-nonce ciphertexts, leading to GHASH key leakage, message forgery, and key recovery…

cryptographyeducationexploitation+1
1 month ago
CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption preview

CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption

GitHubgeorge0papasotiriou/cve-2026-11119-padding-oracle-attack-on-cbc-mode-encryption

Demonstrates a padding oracle attack against AES-CBC encryption using a vulnerable Flask decrypt endpoint and a Python exploit script to decrypt…

cryptographyeducationexploitation+3
1 month ago
meshtastic-cve-2025-52464-poc preview

meshtastic-cve-2025-52464-poc

GitHubmsdmehdipour/meshtastic-cve-2025-52464-poc

Software-only proof of concept for CVE-2025-52464 in Meshtastic Direct Messages

cryptographyeducationembedded-systems-security+4
127 days ago
CVE-2026-52824 preview

CVE-2026-52824

GitHubazureadtrent/cve-2026-52824

Technical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <=…

authenticationcryptographyeducation+3
1 month ago
CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing preview

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

GitHubgeorge0papasotiriou/cve-2026-21009-ecdsa-nonce-reuse-in-iot-firmware-signing

Educational Python simulation demonstrating ECDSA nonce reuse in IoT firmware signing, showing how an attacker can recover private keys from two…

cryptographyeducationexploitation+3
1 month ago
ECC_Attacks preview

ECC_Attacks

GitHubelikaski/ecc_attacks

Known attacks on Elliptic Curve Cryptography

cryptographyeducationvulnerability-analysis
6141 year ago
Previous12…9Next