Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

32 results

payloads

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

ctfcurated-resourceseducation+6

4.0k5 years ago

etherblob-explorer

litneet64/etherblob-explorer

Search and extract blob files on the Ethereum Blockchain network

ctfdata-recoveryforensics+2

435 years ago

CVE-2023-4357-Chrome-XXE

xcanwin/cve-2023-4357-chrome-xxe

[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

ctfcurated-resourceseducation+3

2301 year ago

CVE-2022-44268

entr0pie/cve-2022-44268

Proof-of-concept exploit for ImageMagick arbitrary file read vulnerability (CVE-2022-44268) via crafted PNG textual chunks, enabling extraction of…

ctfeducationexploitation+2

133 years ago

CTFs

adamkadaban/ctfs

CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done

binary-exploitationcryptographyctf+9

86410 months ago

Steganography

ragibson/steganography

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction)…

cryptographyctfeducation+2

6650 years ago

SharkMCP

weirdmachine64/sharkmcp

A swiss-knife MCP server for analysing PCAP files

ctfdigital-forensicseducation+6

755 months ago

ludus_crushftp_cve-2025-31161_sim

rufflabs/ludus_crushftp_cve-2025-31161_sim

Ansible role that simulates a realistic CrushFTP CVE-2025-31161 exploitation scenario with rotating sensitive data files and automated defender…

ctfeducationexploitation+5

3 months ago

files

phoenhex/files

Curated repository of exploits, proof-of-concept code, and vulnerability research presentations from the phoenhex team, focused on binary…

binary-exploitationctfexploitation+3

5196 years ago

Ropper

sashs/ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64,…

binary-analysisbinary-exploitationctf+3

2.2k1 month ago

linuxprivchecker

sleventyeleven/linuxprivchecker

Local Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…

ctfeducationinformation-gathering+3

1.8k5 years ago

DataSurgeon

drew-alleman/datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

ctfdata-exfiltrationforensics+6

9012 years ago

Challenges_2022_Public

downunderctf/challenges_2022_public

Files + Writeups for DownUnderCTF 2022 Challenges

binary-exploitationcryptographyctf+6

2464 years ago

WAES

shiva108/waes

CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result

ctfeducationinformation-gathering+7

708 months ago

vulnerable-container-hub

owasp/vulnerable-container-hub

VULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security

container-securityctfcurated-resources+4

313 years ago

CVE-2025-50154-Aggressor-Script

ash1996x/cve-2025-50154-aggressor-script

Cobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…

command-and-controlctfeducation+9

11 year ago

CVE-2018-8097-PoC

stellardriftlabs/cve-2018-8097-poc

POC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a blind RCE method.

ctfeducationexploitation+3

1 year ago

CTF-CVE-2022-0847

justinye377/ctf-cve-2022-0847

CTF challenge deploying CVE-2022-0847 (Dirty Pipe) exploit to overwrite read-only files. Includes setup scripts, hints, and verification for kernel…

binary-exploitationctfeducation+3

1 year ago

Previous12 Next