Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
677 results
CVE preview

CVE

GitHubjunz-leo/cve

Public vulnerability reports and CVE write-ups by JunZ-Leo, documenting SQL injection flaws in PHPGurukul COVID19 Testing Management System 1.0.

curated-resourceseducationpapers-research+3
1 day ago
metasploit-pentest-report preview

metasploit-pentest-report

GitHubronankongala/metasploit-pentest-report

Authorized penetration test against Metasploitable2 and TryHackMe Blue. 3 CVEs exploited (CVE-2011-2523, CVE-2007-2447, CVE-2017-0144), 4 findings…

ctfcurated-resourceseducation+7
16 days ago
how_to_become_a_malware_analyst preview

how_to_become_a_malware_analyst

GitHubpinksawtooth/how_to_become_a_malware_analyst

Curated guide to becoming a malware analyst, covering essential knowledge, reverse engineering, analysis tools, and LLM-assisted learning with…

binary-analysisctfcurated-resources+7
2797 days ago
CVE-2026-73786 preview

CVE-2026-73786

GitHubpromasu/cve-2026-73786

Placeholder repository intended to host proof-of-concept code and research findings for CVE-2026-73786; currently contains no technical content.

curated-resourcesexploitationpapers-research+2
5 days ago
Internet-Security-Project preview

Internet-Security-Project

GitHubmattia-maria-scivoletto/internet-security-project

Academic report and LaTeX sources analyzing Maltego vulnerability CVE-2020-24656, an XXE injection enabling data exfiltration, written for an…

curated-resourceseducationpapers-research+2
5 years ago
cve-2026-75650-magento-validation-lab preview

cve-2026-75650-magento-validation-lab

GitHubdinosn/cve-2026-75650-magento-validation-lab

Docker lab for validating the CVE-2026-75650 Magento component-level PHP execution primitive and Adobe VULN-39341 patch.

curated-resourceseducationexploitation+3
27 days ago
cs50-cybersecurity-final-project preview

cs50-cybersecurity-final-project

GitHubmhicairo-hue/cs50-cybersecurity-final-project

Technical analysis of the XZ Utils backdoor (CVE-2024-3094), explaining the supply chain attack, obfuscation techniques, and impact on OpenSSH via…

curated-resourceseducationmalware-analysis+2
8 days ago
gha-lab-00d54c717d preview

gha-lab-00d54c717d

GitHubpvharmo2/gha-lab-00d54c717d

Security-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f

curated-resourcesdevsecopseducation+2
8 days ago
gha-lab-8aba6b05dc preview

gha-lab-8aba6b05dc

GitHubpvharmo2/gha-lab-8aba6b05dc

Security-research lab reproducing CVE-2026-45132 (pwn request via pull_request_target chart-name injection in generate-schema.yaml) — snapshot of…

cloud-securitycurated-resourceseducation+3
18 days ago
gha-lab-5bce203f66 preview

gha-lab-5bce203f66

GitHubpvharmo2/gha-lab-5bce203f66

Security-research lab: reproduction of CVE-2026-41249 (GHSA-q58j-g3f4-h26h) — pull_request_target pwn request in .github/workflows/static.yml,…

curated-resourcesdevsecopseducation+2
8 days ago
gha-lab-456dd8a245 preview

gha-lab-456dd8a245

GitHubpvharmo2/gha-lab-456dd8a245

Security-research lab reproducing CVE-2026-41414 (pull_request_target pwn in .github/workflows/pr.yml) — snapshot of skim-rs/skim @ ca986f4, not a…

curated-resourceseducationexploitation+2
8 days ago
gha-lab-677752506e preview

gha-lab-677752506e

GitHubpvharmo2/gha-lab-677752506e

Authorized security-research lab reproducing CVE-2026-42298 (pull_request_target docker-build RCE in pr-docker-build.yml) — flattened snapshot of…

curated-resourceseducationexploitation+2
8 days ago
gha-lab-360f77d0d4 preview

gha-lab-360f77d0d4

GitHubpvharmo2/gha-lab-360f77d0d4

Reproduces CVE-2026-39866, a workflow_dispatch input template injection in a GitHub Actions workflow, using a pinned snapshot of the vulnerable…

curated-resourceseducationexploitation+1
18 days ago
Aether preview

Aether

GitHubfknmega/aether

AI-driven OSINT and security research agent that builds a live knowledge graph from public data, with bundled recon tools and offensive-security…

ai-securityctfcurated-resources+5
1744 days ago
linux-insides preview

linux-insides

GitHub0xax/linux-insides

A book-in-progress about the Linux kernel and its insides.

binary-analysiscurated-resourceseducation+2
33.5k5 days ago
CVE-2026-6471 preview

CVE-2026-6471

GitHub0xblackash/cve-2026-6471

Non-destructive PostgreSQL vulnerability checker for CVE-2026-6471. Audits server version and REPLICATION privileges to identify exposure to logical…

configuration-auditingcurated-resourcesdatabase-security+2
210 days ago
kismet-docs preview

kismet-docs

GitHubkismetwireless/kismet-docs

Documentation repository for Kismet, a wireless network detector, sniffer, and intrusion detection system. Includes guides, configuration references,…

curated-resourceseducationnetwork-security+1
233 years ago
gha-lab-4a8fad8536 preview

gha-lab-4a8fad8536

GitHubpvharmo2/gha-lab-4a8fad8536

Security-research lab reproducing CVE-2026-39382 (GHSA-5jxf-vmqr-5g82): command injection in dbt-labs reusable workflow open-issue-in-repo.yml,…

curated-resourceseducationexploitation+1
10 days ago
Previous12…38Next