Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
33 results
CVE-2026-42945_NginxRift preview

CVE-2026-42945_NginxRift

GitHubkentox493/cve-2026-42945_nginxrift

Automates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…

binary-exploitationcontainer-securityctf+5
7 days ago
Kernel-exploitation preview

Kernel-exploitation

GitHubameetsaahu/kernel-exploitation
binary-exploitationctfcurated-resources+3
371 year ago
Windows-Privilege-Escalation-Notes preview

Windows-Privilege-Escalation-Notes

GitHubsaisathvik1/windows-privilege-escalation-notes

My handbook for Windows Privilege Escalation concepts. Do Check out my Playlist, link: https://www.youtube.com/playlist?list=PLlrnAg4kKF3puXLI0JyltbNJ…

ctfeducationexploitation+5
594 years ago
sudo_inject preview

sudo_inject

GitHubnongiach/sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

ctfdigital-forensicseducation+4
7327 years ago
CVE-2015-1328 preview

CVE-2015-1328

GitHubfernandocassiodev/cve-2015-1328

Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…

binary-exploitationctfeducation+3
29 days ago
CVE-2025-8110 preview

CVE-2025-8110

GitHubixzodiak/cve-2025-8110

Gogs service Exploit and get the root user

ctfeducationexploitation+4
1 month ago
CVE-2021-38297-Go-wasm-Replication preview

CVE-2021-38297-Go-wasm-Replication

GitHubparas98/cve-2021-38297-go-wasm-replication
binary-exploitationctfeducation+6
2 years ago
SQL-Injection-and-RCE_CVE-2025-57819 preview

SQL-Injection-and-RCE_CVE-2025-57819

GitHubmuhammadwaseem29/sql-injection-and-rce_cve-2025-57819

FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in…

ctfeducationexploitation+3
711 months ago
Offensive-lab-2 preview

Offensive-lab-2

GitHubmafiosohack/offensive-lab-2

Penetration test walkthrough on a vulnerable Ubuntu VM. Exploited the ProFTPD 1.3.3c backdoor (CVE-2010-4221) to gain root access and capture the…

ctfeducationexploitation+8
8 months ago
ludus_crushftp_cve-2025-31161_sim preview

ludus_crushftp_cve-2025-31161_sim

GitHubrufflabs/ludus_crushftp_cve-2025-31161_sim
ctfeducationexploitation+5
1 month ago
lab-cve-2016-15042 preview

lab-cve-2016-15042

GitHubimbios/lab-cve-2016-15042

CVE-2016-15042 lab: Dockerized WordPress PoC for unauthenticated file upload in Frontend File Manager <4.0 and N‑Media Post Front‑end Form <1.1

ctfeducationlabs-practice+3
111 months ago
CVE-2026-7465-Lab preview

CVE-2026-7465-Lab

GitHubrootdirective-sec/cve-2026-7465-lab
ctfeducationexploitation+3
2 months ago
CVE-2026-33626-Lab preview

CVE-2026-33626-Lab

GitHubrootdirective-sec/cve-2026-33626-lab
ai-securityctfeducation+3
3 months ago
CVE-2025-49113-Roundcube-RCE preview

CVE-2025-49113-Roundcube-RCE

GitHubrippsec/cve-2025-49113-roundcube-rce

CVE-2025-49113 – Roundcube ≤1.6.10 post-auth RCE via PHP object deserialization (HackTheBox CTF)

code-analysisctfexploitation+4
4 months ago
CVE-2025-4334 preview

CVE-2025-4334

GitHubnxploited/cve-2025-4334

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

ctfeducationexploitation+4
71 year ago
CVE-2025-34157 preview

CVE-2025-34157

GitHubeyodav/cve-2025-34157

A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to…

ctfeducationexploitation+3
11 months ago
CVE-2021-4034-CTF-writeup preview

CVE-2021-4034-CTF-writeup

GitHubwechicken456/cve-2021-4034-ctf-writeup
binary-exploitationctfeducation+3
22 years ago
CVE_2020_35848 preview

CVE_2020_35848

GitHubsabbu143s/cve_2020_35848

CVE-2020-35848 impacts Cockpit-CMS v1.7 due to unsafe handling of user inputs in authentication mechanisms, leading to remote code execution. This…

ctfeducationexploitation+6
1 year ago
Previous12Next