Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

19 results

CVE-2022-44268-pilgrimage

katseyres2/cve-2022-44268-pilgrimage

Automated proof-of-concept exploit for CVE-2022-44268 (ImageMagick arbitrary file read) with PNG payload generation, designed for CTF challenges and…

ctfexploitationpenetration-testing+2

1 year ago

CVE-2024-32002

flojboj/cve-2024-32002

Educational exploit script for CVE-2024-32002 (Git RCE) with automated setup, designed for CTF environments and security training.

ctfeducationexploitation+2

2 years ago

CVE-2015-1328-GoldenEye

elit3pwner/cve-2015-1328-goldeneye

Automated local privilege escalation exploit for CVE-2015-1328 targeting Ubuntu overlayfs, designed for CTF environments with a simple bash…

ctfexploitationpenetration-testing+2

101 year ago

CVE-2023-38408

kali-mx/cve-2023-38408

PoC for the recent critical vuln affecting OpenSSH versions < 9.3p2

ctfeducationexploitation+3

531 year ago

eko2020-challenge

infobyte/eko2020-challenge

Capture-the-flag challenge for Ekoparty 2020 featuring a Flask web application with security vulnerabilities to exploit. Designed for hands-on…

ctfeducationpenetration-testing+2

16 years ago

Vulnerable-Lab-NextJS-CVE-2025-29927

kamal-418/vulnerable-lab-nextjs-cve-2025-29927

Deliberately vulnerable Next.js application designed for practicing exploitation of CVE-2025-29927, with a tutorial video for guided learning.

ctfeducationlabs-practice+2

15 months ago

CVE-2023-52654

foxyproxys/cve-2023-52654

Automated privilege escalation script exploiting misconfigured setuid/sgid binaries, sudo, cron, and LD_PRELOAD on Unix systems. Designed for CTF and…

ctfexploitationpenetration-testing+3

2 years ago

CVE-2024-51428-PoC

d1se0/cve-2024-51428-poc

Wrapper in Python to exploit CVE-2024-51428 in ZoneMinder using Blind SQL Injection using sqlmap, automating enumeration of DBs, tables, and data…

ctfeducationexploitation+3

17 months ago

Exegol

theporgs/exegol

Fully featured and community-driven hacking environment

ctfeducationlabs-practice+3

3.1k3 days ago

pentest-book

six2dez/pentest-book

Curated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…

cloud-securityctfcurated-resources+9

2.1k2 months ago

DynastyPersist

trevohack/dynastypersist

Linux persistence toolkit with 11 modules for SSH key backdoors, cronjobs, systemd services, LKM rootkits, and LD_PRELOAD privilege escalation.…

ctfpenetration-testingpersistence-mechanisms+3

1611 year ago

challenges

star-sg/challenges

Christmas-themed CTF Advent Calendar with 12 structured challenges across binary exploitation, cryptography, reverse engineering, forensics, OSINT,…

binary-exploitationcryptographyctf+6

248 months ago

BreakEscape

cliffe/breakescape

Mountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…

ctfeducationlabs-practice+3

65 days ago

VQ-RefluxCore

vulnquest58/vq-refluxcore

is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with…

binary-exploitationctfeducation+5

2 months ago

Privilege-Escalation

ignitetechnologies/privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

ctfcurated-resourceseducation+6

3.6k7 months ago

WebGoat

webgoat/webgoat

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

ctfeducationlabs-practice+4

9.4k7 days ago

Cybersec

amitr12/cybersec

Single-file HTML cheat sheet for red teamers and pentesters with auto-injecting attacker/target variables, OS-aware reverse shell generator, and…

command-and-controlctfeducation+9

112 months ago

REACT-CVE-2025-55182-Lab

androidteacher/react-cve-2025-55182-lab

Lab with PoC

ctfeducationexploitation+5

7 months ago

Previous12 Next