Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

61 results

Strapi-RCE

hackhoven/strapi-rce

Exploit script showcasing a mixture of CVE-2019-18818 and CVE-2019-19609 for unauthenticated remote code execution in Strapi CMS.

ctfeducationexploitation+3

2 years ago

CVE-2023-52654

foxyproxys/cve-2023-52654

Automated privilege escalation script exploiting misconfigured setuid/sgid binaries, sudo, cron, and LD_PRELOAD on Unix systems. Designed for CTF and…

ctfexploitationpenetration-testing+3

2 years ago

htb-wifinetictwo-exploit

behindsecurity/htb-wifinetictwo-exploit

A simple python script to exploit CVE-2021-31630 on HTB WifineticTwo CTF

binary-exploitationctfeducation+5

2 years ago

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

ubuntustrike/cve-2017-9805-apache-struts-fuzz-n-sploit

A script to Fuzz and and exploit Apache struts CVE-2017-9805

ctfexploitationfuzzing+3

7 years ago

CVE-2024-32002

flojboj/cve-2024-32002

Educational exploit script for CVE-2024-32002 (Git RCE) with automated setup, designed for CTF environments and security training.

ctfeducationexploitation+2

2 years ago

CVE-2018-10933

silasspringer/cve-2018-10933

CTF challenge and exploit script for CVE-2018-10933, a libSSH authentication bypass, with Docker setup and walkthrough.

binary-exploitationctfeducation+3

3 years ago

CVE-2023-27163-ssrf-to-port-scanning

rishabh-kumar-cyber-sec/cve-2023-27163-ssrf-to-port-scanning

It is a simple script to automate internal port scanning dueto SSRF in requests-baskets v 1.2.1. this script can also assisst in solving 'SAU'…

ctfpenetration-testingport-scanning+2

2 years ago

linux-smart-enumeration

diego-treitos/linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

ctfinformation-gatheringpenetration-testing+2

4.0k6 months ago

0l4bs

tegal1337/0l4bs

Cross-site scripting labs for web application security enthusiasts

ctfeducationlabs-practice+1

3485 years ago

Awesome-Pentest

al1ex/awesome-pentest

Collection of penetration testing tools

ctfcurated-resourceseducation+6

835 years ago

osx-password-dumper

jeanpeyremesmots/osx-password-dumper

A tool to dump users's .plist on a Mac OS system and to convert them into a crackable hash

ctfpassword-crackingpenetration-testing+2

532 years ago

CVE-2021-31630-HTB

hunt3r0x/cve-2021-31630-htb

proof of Concept (PoC) exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform.

ctfeducationexploitation+3

92 years ago

CVE-2021-3560

cpu0x00/cve-2021-3560

ubuntu new PrivEsc race condition vulnerability

ctfexploitationpenetration-testing+2

25 years ago

CVE-2026-42945_NginxRift

kentox493/cve-2026-42945_nginxrift

Automates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…

binary-exploitationcontainer-securityctf+5

12 months ago

CVE-2017-8917-Joomla

baptistecontreras/cve-2017-8917-joomla

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

ctfeducationexploitation+3

22 years ago

CVE-2026-44881_exploit

0xdak/cve-2026-44881_exploit

Single-script exploit for CVE-2026-44881 that chains .git credential leakage, Portainer Git-symlink injection, arbitrary host file read, and SSH…

cloud-securitycontainer-securityctf+7

4 months ago

CVE-2025-5287

rootharpy/cve-2025-5287

Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0

ctfeducationexploitation+3

11 year ago

CVE-2026-20896

kaleth4/cve-2026-20896

Automated PoC exploit for CVE-2026-20896, a Gitea authentication bypass via directory traversal in the API authorization header, enabling…

authentication-authorizationctfexploitation+3

14 months ago

Previous 1 234 Next