Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1091 results

day05-grafana-sqlexpr-lab

amalpvatayam67/day05-grafana-sqlexpr-lab

Grafana SQL Expressions → DuckDB LFI (CVE-2024-9264)

ctfeducationexploitation+3

1 year ago

ZeroLogon-CVE-2020-1472-lab

100hnomeunome/zerologon-cve-2020-1472-lab

Explicação e demonstração da vulnerabilidade ZeroLogon (CVE-2020-1472)

ctfeducationexploitation+7

1 year ago

Poison-HTB-Report

bugvex/poison-htb-report

Privilege Escalation on HTB "Poison" using PwnKit (CVE-2021-4034)

ctfeducationexploitation+3

1 year ago

CVE-2021-37787

vasykor/cve-2021-37787

CVE-2021-37787

ctfeducationexploitation+3

1 year ago

CVE-2025-10230

marcostolosa/cve-2025-10230

OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0

ctfeducationexploitation+3

11 months ago

CVE-2007-2447_python

bdunlap9/cve-2007-2447_python

Exploit i used in HTB

ctfeducationexploitation+2

3 years ago

HTB-Silentium-Writeup

twappz/htb-silentium-writeup

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

container-escapectfeducation+6

6 months ago

CVE-2022-46152

0xbbdd/cve-2022-46152

CVE-2022-46152: Improper Validation of Array Index in the `cleanup_shm_refs' function.

binary-exploitationctfeducation+5

8 months ago

CVE-2024-42327

igorbf495/cve-2024-42327

writeup cve-2024-42327

ctfeducationexploitation+7

1 year ago

CVE-2022-37706

sanan2004/cve-2022-37706

PoC

binary-exploitationcommand-and-controlctf+6

2 years ago

OverlayFS-CVE-2021-3493

fathallah17/overlayfs-cve-2021-3493

Exploit a 2021 Kernel vulnerability in Ubuntu to become root almost instantly!

binary-exploitationctfeducation+3

2 years ago

Next.Js-middleware-bypass-vulnerability-CVE-2025-29927

naveen-005/next.js-middleware-bypass-vulnerability-cve-2025-29927

A basic proof of concept of the CVE-2025-29927 vulnerability that allows to bypass the middleware scripts.

ctfeducationpenetration-testing+3

1 year ago

CVE-2023-42793

flojboj/cve-2023-42793

TeamCity CVE-2023-42793 RCE (Remote Code Execution)

ctfeducationexploitation+3

2 years ago

CVE-2021-24545

dnr6419/cve-2021-24545

WordPress Plugin HTML Author Bio description XSS

ctfeducationexploitation+3

5 years ago

CVE-2014-6271_pwnable

hanmin0512/cve-2014-6271_pwnable

Hands-on lab demonstrating the Shellshock (CVE-2014-6271) Bash vulnerability with privilege escalation via environment variable injection, based on…

binary-exploitationctfeducation+3

3 years ago

CVE-2024-53900

gokul-krishnan-v-r/cve-2024-53900

Mongo Vulnub Lab...Try to Hack IT.....!

ctfdatabase-securityeducation+3

1 year ago

CVE-Research

anugiarrawwala/cve-research

CVE-2017-0144 (Eternal Blue) | CVE-2023-3881 | CVE-2011-2523

ctfeducationexploitation+2

2 years ago

vulnmachines

vulnmachines/vulnmachines

Platform

ctfcurated-resourceseducation+2

4 years ago

Previous 1…596061 Next