Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

27 results

mojarra-2.2.13-patched

thelonelycoder/mojarra-2.2.13-patched

Backport of the CVE-2020-6950 security fix to Mojarra 2.2.13, providing a patched jsf-impl JAR with minimal, reviewable changes for legacy…

curated-resourceseducationsupply-chain-security+1

1 month ago

CVE-2026-50522

chpratik/cve-2026-50522

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

curated-resourceseducationincident-response+3

2 months ago

Windows10Exploits

nu11secur1ty/windows10exploits

Microsoft » Windows 10 : Security Vulnerabilities

curated-resourcesexploitationinformation-gathering+1

9314 months ago

copy-fail-CVE-2026-31431-detection-probe

ochebotar/copy-fail-cve-2026-31431-detection-probe

Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…

configuration-auditingcurated-resourcesdevsecops+7

105 months ago

vulns

hnsecurity/vulns

HN Security's advisories.

curated-resourceseducationpapers-research+2

2211 months ago

Blackash-CVE-2017-0144

firetemple/blackash-cve-2017-0144

CVE-2017-0144

curated-resourceseducationexploitation+6

111 months ago

Se7enSlip

shalevo13/se7enslip

A scanner and testter of the CVE-2025-11001 of 7-zip

curated-resourceseducationexploitation+3

41 year ago

CVE-2023-22527

thompson005/cve-2023-22527

Comprehensive documentation and defensive resources for CVE-2023-22527, a critical SSTI remote code execution vulnerability in Atlassian Confluence.…

curated-resourceseducationexploitation+3

1 year ago

srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

shoucheng3/srikanth-lingala__zip4j_cve-2018-1002202_1-3-2

Decompiled source code of zip4j library versions 1.3.2 (vulnerable) and 1.3.3 (fixed) for CVE-2018-1002202 path traversal analysis, part of the…

code-analysiscurated-resourceseducation+3

1 year ago

instructions-summarizing

gdesantis01/instructions-summarizing

Site containing info useful for demonstrate CVE-2023-37273

curated-resourceseducationexploitation+2

1 year ago

CVE-2023-4357-Chrome-XXE

xcanwin/cve-2023-4357-chrome-xxe

[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

ctfcurated-resourceseducation+3

2291 year ago

exim-cve-2019-10149-data

cloudflare/exim-cve-2019-10149-data

Curated dataset of IPs, ASNs, and SMTP banners for Exim CVE-2019-10149, with linked advisories and threat actor intelligence for vulnerability…

curated-resourcesinformation-gatheringioc-management+3

22 years ago

CVE-2023-47437

herombey/cve-2023-47437

Proof-of-concept disclosure for CVE-2023-47437: stored cross-site scripting vulnerability in Pachno affecting comment forms. Includes affected…

curated-resourceseducationvulnerability-analysis+2

2 years ago

CVE-2023-2033-Analysis

sandumjacob/cve-2023-2033-analysis

A collection of resources and information about CVE-2023-2033

binary-exploitationcurated-resourceseducation+3

203 years ago

MOVEit-CVE-2023-34362

kenbuckler/moveit-cve-2023-34362

Tracked impact of MOVEit CVE-2023-34362 with affected organizations, domain discovery via SFTP headers and cookies, and a real-time news ticker.

curated-resourcesinformation-gatheringosint+3

63 years ago

CVE-2014-0160-Chrome-Plugin

mre-fog/cve-2014-0160-chrome-plugin

Deprecated Chrome plugin that checks websites for the Heartbleed vulnerability (CVE-2014-0160) via an API, with linked exploit code for educational…

curated-resourceseducationexploitation+2

3 years ago

advisories

justinsteven/advisories

Personal repository of security advisory disclosures covering vulnerabilities in web, cloud, infrastructure, and open-source software.

cloud-securitycurated-resourceseducation+3

2753 years ago

CVE-2023-24059

gmh5225/cve-2023-24059

Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January…

curated-resourceseducationexploitation+2

3 years ago

Previous12 Next