Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
35 results
Principal-HackTheBox preview

Principal-HackTheBox

GitHubledksv/principal-hackthebox

Detailed walkthrough of exploiting CVE-2026-29000 in pac4j-jwt to bypass authentication, extract credentials from API settings, and escalate…

authenticationcryptographyctf+5
3 months ago
CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery preview

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

GitHubgeorge0papasotiriou/cve-2026-11110-aes-gcm-nonce-reuse-leading-to-key-recovery

Demonstrates AES-GCM nonce-reuse exploitation by collecting same-nonce ciphertexts, leading to GHASH key leakage, message forgery, and key recovery…

cryptographyeducationexploitation+1
26 days ago
CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption preview

CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption

GitHubgeorge0papasotiriou/cve-2026-11119-padding-oracle-attack-on-cbc-mode-encryption

Demonstrates a padding oracle attack against AES-CBC encryption using a vulnerable Flask decrypt endpoint and a Python exploit script to decrypt…

cryptographyeducationexploitation+3
26 days ago
CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection preview

CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection

GitHubgeorge0papasotiriou/cve-2026-4444-jwt-algorithm-confusion-via-kid-injection

POC for CVE-2026-4444 demonstrating JWT algorithm confusion via untrusted kid injection, including vulnerable Node.js server and Python exploit for…

api-securityauthentication-authorizationcryptography+4
27 days ago
CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation- preview

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

GitHubgeorge0papasotiriou/cve-2026-4567-post-quantum-kem-timing-side-channel-kyber-decapsulation-

Demonstrates a timing side-channel in Kyber KEM decapsulation using a vulnerable C server and Python attack script, measuring ciphertext rejection…

cryptographyexploitationvulnerability-analysis
27 days ago
dotnetpaddingoracle preview

dotnetpaddingoracle

GitHubnccgroup/dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

cryptographyencryption-decryption-toolsexploitation+3
3110 years ago
w1f1t3kAl1 preview

w1f1t3kAl1

GitHubnu11secur1ty/w1f1t3kal1

w1f1t3kAl1

cryptographyfuzzingpassword-attacks+3
4720 days ago
PoC-CVE-2025-69419 preview

PoC-CVE-2025-69419

GitHubkha-beleh/poc-cve-2025-69419

Minimal proof-of-concept reproducer for CVE-2025-69419, a heap buffer overflow in OpenSSL's PKCS12_get_friendlyname() triggered by a crafted…

binary-analysiscryptographyeducation+3
1 month ago
vuln-bank-mobile preview

vuln-bank-mobile

GitHubcommando-x/vuln-bank-mobile

A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…

android-securityauthenticationcryptography+8
1011 year ago
rocacheck preview

rocacheck

GitHubtitanous/rocacheck

Go package that checks if RSA keys are vulnerable to ROCA / CVE-2017-15361

code-analysiscryptographyencryption-decryption-tools+2
168 years ago
Testability-CVE-2014-1266 preview

Testability-CVE-2014-1266

GitHublandonf/testability-cve-2014-1266

Demonstrating that SSLVerifySignedServerKeyExchange() is trivially testable.

code-analysiscryptographyeducation+1
2612 years ago
RootQuest-CTF-Box-Multi-Stage-Exploitation-VM preview

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

GitHubthieveshkar/rootquest-ctf-box-multi-stage-exploitation-vm

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics,…

binary-exploitationcryptographyctf+7
10 months ago
Infineon-CVE-2017-15361 preview

Infineon-CVE-2017-15361

GitHublva/infineon-cve-2017-15361

Simple PowerShell script to check whether a computer is using an Infineon TPM chip that is vulnerable to CVE-2017-15361.

cryptographyencryption-decryption-toolshardware-iot-security+3
28 years ago
heartbleed-lab preview

heartbleed-lab

GitHubvictoriacfigueiredo/heartbleed-lab

Educational laboratory for studying CVE-2014-0160 (Heartbleed) and framing inconsistencies in TLS heartbeat handling.

binary-exploitationcryptographyeducation+3
3 months ago
CVE-2024-22894 preview

CVE-2024-22894

GitHubjaarden/cve-2024-22894

Proof-of-concept exploit for CVE-2024-22894, demonstrating 3DES-encrypted root password extraction from Alpha Innotec/Novelan heatpump firmware,…

cryptographyembedded-systems-securityexploitation+6
32 years ago
CVE-2022-21449-TLS-PoC preview

CVE-2022-21449-TLS-PoC

GitHubnotkmhn/cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cryptographyexploitationpenetration-testing+2
1215 months ago
CVE-2021-3345 preview

CVE-2021-3345

GitHubmlgradish/cve-2021-3345

POC exploit of CVE-2021-3345, a vulnerability in libgcrypt version 1.9.0

binary-exploitationcryptographyexploitation+2
95 years ago
bouncy-castle-generative-test-poc preview

bouncy-castle-generative-test-poc

GitHubmadstap/bouncy-castle-generative-test-poc

A generative test that would've caught CVE-2020-28052

code-analysiscryptographyeducation+2
5 years ago
Previous12Next