Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

22 results

splitting-the-email-atom

portswigger/splitting-the-email-atom

Research materials and tooling for exploiting email address parser discrepancies to bypass access controls, including fuzzers, Hackvertor tags, CSS…

ctfeducationemail-security+7

10 months ago

StegoLab

vatsal200600/stegolab

All-in-one Image Steganography Toolkit for CTFs & Forensics

ctfdigital-forensicsforensics+2

26 months ago

awesome-connected-things-sec

v33ru/awesome-connected-things-sec

A Curated list of Security Resources for all connected things

ctfcurated-resourceseducation+9

3.6k13 days ago

Awesome-Pentest

al1ex/awesome-pentest

Collection of penetration testing tools

ctfcurated-resourceseducation+6

845 years ago

wp2shell-poc

colere-sys/wp2shell-poc

Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030

ctfeducationexploit-frameworks+5

43 months ago

CVE-2025-1661

shahwarshah/cve-2025-1661

HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion (LFI)

ctfeducationexploitation+3

1 year ago

CVE-2025-4334

nxploited/cve-2025-4334

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

ctfeducationexploitation+4

71 year ago

CVE-2022-37706

ecu-10525611-xander/cve-2022-37706

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

binary-exploitationctfexploitation+2

24 years ago

CVE-2021-41773-Playground

hydragyrum/cve-2021-41773-playground

Some docker images to play with CVE-2021-41773 and CVE-2021-42013

ctfeducationexploitation+3

64 years ago

AllAboutBugBounty

daffainfo/allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

ctfcurated-resourceseducation+7

7.0k3 years ago

payloads

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

ctfcurated-resourceseducation+6

4.0k5 years ago

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

hackedrishi/ctf_writeups-tryhackme-cve-2021-41773-

CTF_WRITEUPS/TryHackMe /CVE-2021-41773/

ctfeducationexploitation+4

1 year ago

awesome-ctf

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

cryptographyctfcurated-resources+7

12.0k6 years ago

Blackash-CVE-2025-4322

gmh5225/blackash-cve-2025-4322

CVE-2025-4322 – Unauthenticated Privilege Escalation via Password Update "Account Takeover" 🔥

ctfeducationexploitation+5

1 year ago

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

threatradarai/trai-001-critical-rce-vulnerability-in-apache-parquet-cve-2025-30065-simulation

A CVSS 10.0-rated vulnerability in the parquet-avro Java module allows remote code execution via unsafe deserialization when parsing schemas. Tracked…

ctfeducationexploitation+3

11 year ago

CVE-2026-8181

yucaerin/cve-2026-8181

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass

authenticationctfeducation+4

5 months ago

ethical-hacking-CVE-2011-2523

chathura123git/ethical-hacking-cve-2011-2523

Ethical Hacking Assessment | Practical vulnerability testing of vsftpd 2.3.4 backdoor (CVE-2011-2523) on Metasploitable2 using Kali Linux & Metasploit

ctfeducationexploitation+3

5 months ago

awesome-ethical-hacking-resources

husnainfareed/awesome-ethical-hacking-resources

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

ctfcurated-resourceseducation+7

3.8k6 months ago

Previous12 Next