Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
747 results
jfrog-openssl-tools preview

jfrog-openssl-tools

GitHubjfrog/jfrog-openssl-tools

Python utilities to check whether a TLS server requires client certificates and to scan local ELF binaries for vulnerable OpenSSL 3.x code linked to…

binary-analysiscryptographyinformation-gathering+3
16
4 years ago
rocq-cve-poc-21682 preview

rocq-cve-poc-21682

GitHubendrazine/rocq-cve-poc-21682

CVE-2026-72703 — Rocq Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls

cryptographyexploitationstatic-analysis+1
11 days ago
rocq-cve-poc-22024 preview

rocq-cve-poc-22024

GitHubendrazine/rocq-cve-poc-22024

CVE-2026-72704 — Rocq Guard Checker Trusts Corrupted Recursive Tree After Transport

cryptographyexploitationpapers-research+1
11 days ago
cve-2026-97229-lab preview

cve-2026-97229-lab

GitHubemc-kk/cve-2026-97229-lab

Docker lab and Python exploit for CVE-2026-97229, an unauthenticated GitLab CI-lint Onigmo regex integer overflow leading to RCE, with probing,…

cryptographyexploitationlabs-practice+6
1 day ago
CVE-2026-91403-eMudhra-Java-Scanner preview

CVE-2026-91403-eMudhra-Java-Scanner

GitHubfahrihfatahilah/cve-2026-91403-emudhra-java-scanner

Checks Java and system trust stores for eMudhra CA certificates affected by CVE-2026-91403 by probing TLS test hosts, then reports vulnerable entries…

authenticationconfiguration-auditingcontainer-security+5
112 days ago
CVE-2026-97657 preview

CVE-2026-97657

GitHubmurrez/cve-2026-97657

Python PoC for CVE-2026-97657: forges AES-CTR recovery tokens via XOR malleability to bypass authentication and take over WordPress accounts in…

authenticationcryptographyexploitation+5
122 days ago
javafix preview

javafix

GitHubhubly12/javafix

Check and fix Java runtimes for CVE-2026-91403 (compromised eMudhra intermediates) on Windows and macOS — consent-first, no dependencies, no network.

configuration-auditingcryptographydefensive-tools+3
13 days ago
CVE-2026-96760 preview

CVE-2026-96760

GitHubuziii2208/cve-2026-96760

Authlib 1.7.2: Signature Verification Bypass - General JSON JWS Accepts Unsigned Payload when `signatures` is Empty

authenticationcode-analysiscryptography+4
1 month ago
CVE-2026-89026 preview

CVE-2026-89026

GitHubim-hanzou/cve-2026-89026

Python PoC for CVE-2026-89026: forges an HS256 JWT with Issabel pbxapi's hard-coded key to bypass auth and execute OS commands via AMI originate.

authenticationcryptographyexploitation+4
1 month ago
Previous1…4142Next