Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

170 results

challenge_CVE-2020-13777

shigeki/challenge_cve-2020-13777

Challange CVE-2020-13777

cryptographyctfeducation+3

6 years ago

CVE-2019-6690-python-gnupg-vulnerability

stigtsp/cve-2019-6690-python-gnupg-vulnerability

Proof-of-concept exploit for CVE-2019-6690, demonstrating input validation bypass in python-gnupg symmetric encryption via newline injection in…

cryptographyctfeducation+3

16 years ago

gringotts

amlweems/gringotts

proof of concept for CVE-2020-0601

cryptographyeducationencryption-decryption-tools+2

16 years ago

CVE-2014-0160

0xblackash/cve-2014-0160

CVE-2014-0160

cryptographyeducationexploitation+3

5 months ago

CVE-2025-68621

sivaadityacoder/cve-2025-68621

Educational PoC and analysis of CVE-2025-68621, a timing attack on Trilium Notes sync login. Demonstrates HMAC hash recovery via network timing…

cryptographyeducationexploitation+3

4 months ago

dsa

alexmullins/dsa

Analysis of CVE-2016-3959 and a Proof of Concept Attack Against a Go SSH Server.

cryptographyeducationexploitation+2

110 years ago

CVE-2023-29409

mateusz834/cve-2023-29409

CVE-2023-29409 reproducer

cryptographyeducationexploitation+2

13 years ago

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

user6400/cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031 — offline plaintext password recovery for Lansweeper lsrunase 2.0 / lsencrypt 2.0 via a hardcoded RC4 key. PoC + technical advisory.

cryptographyeducationexploitation+4

2 months ago

ONe-TIME-ecb-oracle-attack-AES

spiralbl0ck/one-time-ecb-oracle-attack-aes

Implementation of the byte-at-a-time ECB oracle attack against AES-ECB encryption. Decrypts ciphertexts by feeding chosen plaintexts to a block…

cryptographyeducationexploitation+1

15 years ago

CVE-2022-0778

jeongjunsoo/cve-2022-0778

Proof-of-concept exploit for CVE-2022-0778, a denial-of-service vulnerability in OpenSSL's BN_mod_sqrt() function, with Docker-based lab environment…

cryptographyeducationexploitation+2

12 years ago

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

thieveshkar/rootquest-ctf-box-multi-stage-exploitation-vm

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics,…

binary-exploitationcryptographyctf+7

10 months ago

poc-dsa-verify-CVE-2019-17596

pquerna/poc-dsa-verify-cve-2019-17596

Demonstration of Go's dsa.Verify bug (CVE-2019-17596)

cryptographyeducationexploitation+2

16 years ago

CVE-2022-37177

jc175/cve-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm

cryptographyeducationinformation-gathering+2

14 years ago

AIS3-2024-Project-D5Team

heymrsalt/ais3-2024-project-d5team

Reappear-CVE-2022-21449-TLS-PoC

cryptographyctfeducation+3

11 year ago

CVE-2024-27632

ally-petitt/cve-2024-27632

CVE-2024–27632 Reference

cryptographyeducationpapers-research+2

12 years ago

sslWeakness

ahegaopsyops/sslweakness

Example script demonstrating a weak PRNG, CVE-2008-0166

cryptographyeducationexploitation+2

11 months ago

dual-ec-drbg

eddieoz/dual-ec-drbg

Educational Jupyter notebook demonstrating the Dual_EC_DRBG cryptographic backdoor (CVE-2014-8610) with NIST P-256 state recovery attack, historical…

cryptographyctfeducation+3

6 months ago

Simple-Sweet32

zakyhermawan/simple-sweet32

Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183)

cryptographyeducationexploitation+2

8 months ago

Previous 1…789 10 Next