Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

254 results

mailorder

monoxgas/mailorder

Nalpeiron Licensing Service (NLSSRV32) arbitrary disk read [CVE-2019-19315]

binary-exploitationdata-exfiltrationexploitation+2

6 years ago

CVE-2026-24849

doany1/cve-2026-24849

Proof-of-concept exploit for CVE-2026-24849, an authenticated path-traversal arbitrary file read in OpenEMR's EtherFax module. Reads server files…

data-exfiltrationexploitationinformation-gathering+3

3 months ago

c-CVE-2024-0044

007criptografia/c-cve-2024-0044

CVE-2024-0044: uma vulnerabilidade de alta gravidade do tipo "executar como qualquer aplicativo" que afeta as versões 12 e 13 do Android

android-securitydata-exfiltrationexploitation+6

42 years ago

EsFileExplorer-CVE-2019-6447

chethine/esfileexplorer-cve-2019-6447

Exploiting Android Vulnerability in ES File Explorer

android-securitydata-exfiltrationexploitation+3

34 years ago

Rootsmart-v2.0

crackercat/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8

24 years ago

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerability

Unauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…

data-exfiltrationexploitationinformation-gathering+4

32 years ago

CVE-2025-10681

michaeladamgroberman/cve-2025-10681

CVE-2025-10681: Hardcoded Azure Blob Storage Account Key — Gardyn Home Kit (ICSA-26-055-03)

cloud-securitydata-exfiltrationembedded-systems-security+8

3 months ago

metasploitable2-exploitation-metasploit

ethicalhackinglabs/metasploitable2-exploitation-metasploit

Full Metasploit exploitation walkthrough against Metasploitable2 — vsftpd backdoor, Samba CVE-2007-2447, UnrealIRCd backdoor, Netcat exfiltration,…

command-and-controldata-exfiltrationeducation+9

2 months ago

pmp-exploit

s3bap3/pmp-exploit

Password Manager Pro Exploit

data-exfiltrationexploitationpassword-attacks+3

210 years ago

CVE-2023-40028

godylockz/cve-2023-40028

POC for CVE-2023-40028: Ghost CMS Arbitrary File Read

data-exfiltrationexploitationinformation-gathering+3

21 year ago

CVE-2026-27825

romain-deperne/cve-2026-27825

Path Traversal in mcp-atlassian via zip extraction in upload_attachment — CVSS 9.3

data-exfiltrationexploitationinformation-gathering+3

4 months ago

cve_2024_0044

hunter24x24/cve_2024_0044

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

android-securitydata-exfiltrationexploitation+5

12 years ago

CVE-2017-10271

dungsocool/cve-2017-10271

Step-by-step lab guide for exploiting CVE-2017-10271 (WebLogic XMLDecoder deserialization RCE) with manual payload construction, blind RCE bypass,…

binary-exploitationdata-exfiltrationeducation+7

3 months ago

immich-exfiltration-demo

emanuelepns/immich-exfiltration-demo

Cybersecurity demo exploiting CVE-2026-35455 with automatic API key generation and exfiltration

data-exfiltrationeducationexploitation+3

3 months ago

Mysql-Readfile

al1ex/mysql-readfile

Mysql-Readfile

database-securitydata-exfiltrationexploitation+3

14 years ago

CVE-2025-55130

scumfrog/cve-2025-55130

POC for CVE-2025-55130

container-escapedata-exfiltrationexploitation+3

17 months ago

node-ipc-malware-protestware-CVE-2022-23812

scriptzteam/node-ipc-malware-protestware-cve-2022-23812

node-ipc is malware / protestware!

data-exfiltrationeducationincident-response+3

14 years ago

CVE-2026-Discord

nicetop1027/cve-2026-discord

Critical vulnerability report detailing zero-day Remote Debugging Port exposure in Discord macOS client leading to account takeover, spyware, worm…

data-exfiltrationexploitationpenetration-testing+3

7 months ago

Previous 1…111213…15 Next