Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
618 results
TospoVirus preview

TospoVirus

GitHubcatatonicprime/tospovirus

A WiFi Pineapple infecting worm.

command-and-controldata-exfiltrationexploitation+5
17
11 years ago
pastenum preview

pastenum

GitHubshadowbq/pastenum

Pastenum is a text dump enumeration tool.

crawlerdata-exfiltrationinformation-gathering+3
1412 years ago
FARO preview

FARO

GitHubgradiant/faro

FARO - Document Sensitivity Detector

configuration-auditingdata-exfiltrationeducation+5
103 years ago
CVE-2022-26159-Ametys-Autocompletion-XML preview

CVE-2022-26159-Ametys-Autocompletion-XML

GitHubp0dalirius/cve-2022-26159-ametys-autocompletion-xml

A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.

crawlerdata-exfiltrationexploitation+3
144 years ago
android-cve-2010-4804 preview

android-cve-2010-4804

GitHubthomascannon/android-cve-2010-4804

Android Data Stealing Vulnerability

android-securitydata-exfiltrationexploitation+2
812 years ago
ghostsplice preview

ghostsplice

GitHubasset-group/ghostsplice

Ghostsplice repository: PoC for Cross-Channel Trust Fragmentation Attack

adversarial-attackai-securitydata-exfiltration+3
71 month ago
Malicious-MCP preview

Malicious-MCP

GitHubquinnbast/malicious-mcp

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...

ai-securitycommand-and-controldata-exfiltration+8
85 months ago
CVE-2024-34693 preview

CVE-2024-34693

GitHubmbadanoiu/cve-2024-34693

CVE-2024-34693: Server Arbitrary File Read in Apache Superset

database-securitydata-exfiltrationexploitation+3
102 years ago
SkeletonKey preview

SkeletonKey

GitHubdefineid/skeletonkey

CVE-2026-6765, Test only FormAutofill handlers exposed in Firefox

adversarial-attackdata-exfiltrationexploitation+3
22 days ago
CVE-2024-23700-C2-Server preview

CVE-2024-23700-C2-Server

GitHubkaitokidc500/cve-2024-23700-c2-server

Source code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700

android-securitycommand-and-controldata-exfiltration+9
23 days ago
CVE-2023-28432 preview

CVE-2023-28432

GitHubcuerz/cve-2023-28432

CVE-2023-28432 MinIO敏感信息泄露检测脚本

cloud-securitydata-exfiltrationinformation-gathering+2
103 years ago
memory-poisoning-axis preview

memory-poisoning-axis

GitHubcsoai-org/memory-poisoning-axis

🧪 Measures memory-poisoning / prompt-injection deterministically — anchored to CVE-2026-24301 (CoSnitch), Inspect scorer, signed receipts.…

adversarial-attackai-securitydata-exfiltration+1
11 days ago
keepass-exfil-forensics preview

keepass-exfil-forensics

GitHubpugazhendii22/keepass-exfil-forensics

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

ctfdata-exfiltrationdigital-forensics+6
1 month ago
HiddenSteps preview

HiddenSteps

GitHubjgalego/hiddensteps

HiddenSteps — a local-first personal workflow intelligence platform

ctfcurated-resourcesdata-exfiltration+8
51 month ago
zygote-CVE-2024-31317 preview

zygote-CVE-2024-31317

GitHubvnescape/zygote-cve-2024-31317

This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID.

android-securitydata-exfiltrationexploitation+3
43 months ago
Gozi preview

Gozi

GitHubpr0xylife/gozi
command-and-controldata-exfiltrationmalware-analysis+4
54 years ago
tesla-security-research preview

tesla-security-research

GitHubanalyticeth/tesla-security-research

Vulnerability research on Tesla Model 3/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell,…

command-and-controldata-exfiltrationeducation+7
53 months ago
mailorder preview

mailorder

GitHubmonoxgas/mailorder

Nalpeiron Licensing Service (NLSSRV32) arbitrary disk read [CVE-2019-19315]

binary-exploitationdata-exfiltrationexploitation+2
46 years ago
Previous1…303132…35Next