Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

46 results

cve-2026-99999-audit

quaerendir/cve-2026-99999-audit

Read-only Bash audit script that triages CVE-2026-99999 (PwnEscape) Linux kernel IPv4 checksum OOB write, checking patch status, module reachability,…

configuration-auditingcontainer-securitydefensive-tools+6

18 days ago

mitigate-cve-2026-98432

matthew-hollick/mitigate-cve-2026-98432

Puppet module that deploys a temporary UFW/iptables rule dropping IPv4 TCP packets with IPv4 options to mitigate CVE-2026-98432 until vendor kernel…

configuration-auditingdefensive-toolsdevsecops+4

2 days ago

cve-2026-98432-dkms

knneth/cve-2026-98432-dkms

Ubuntu DKMS kernel module that mitigates CVE-2026-98432 by dropping IPv4 TCP packets carrying IP options via a netfilter hook in every network…

defensive-toolsincident-responsemisconfiguration+2

1 day ago

CVE-2026-92956vm2test__20261012

araxyai/cve-2026-92956__vm2__test__20261012

Node.js sandbox for running untrusted JavaScript in-process, using Proxies and controlled require to restrict built-in and external module access.

code-analysisdefensive-toolssecurity-virtualization+2

23 days ago

Rusty-Stealer-Keylogger-Screen-Streaming-Service-Persistence-Defender-Evasion-Analysis

kaandemir993/rusty-stealer-keylogger-screen-streaming-service-persistence-defender-evasion-analysis

Reverse engineering Rusty Stealer: A Rust-based RAT featuring advanced keylogging, live screen streaming, and aggressive defense evasion (killing…

binary-analysiscommand-and-controldefensive-tools+6

2 days ago

nxc-vulnscan

rvsh3ll/nxc-vulnscan

NetExec module: run every stock Windows vuln-check in one pass (check-only, no exploit)

defensive-toolsexploitationnetwork-security+5

3 days ago

Locksmith2

jakehildreth/locksmith2

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

configuration-auditingdefensive-toolseducation+8

1268 days ago

CVE-2026-85315

oscerd/cve-2026-85315

Runnable proof-of-concept reproducer for CVE-2026-85315, demonstrating camel-grpc consumer exception message disclosure (CWE-209) in Camel Spring…

defensive-toolseducationinformation-gathering+2

14 days ago

CVE-2026-63292

0xblackash/cve-2026-63292

Documents CVE-2026-63292, a stack-based buffer overflow in Apache mod_vhost_alias, with affected versions, safe version and configuration checks, and…

configuration-auditingdefensive-toolseducation+4

1 month ago

ReflectivePluginLoader

racoten/reflectivepluginloader

Minimal Windows x64 reflective PE mapper that loads DLLs from memory without LoadLibrary, resolves exports, and dispatches calls through a…

binary-exploitationdefensive-toolseducation+7

517 days ago

CVE-2026-42978-PoC-Research

coactionbrittlemaidenhair51/cve-2026-42978-poc-research

Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite.

defensive-toolsexploitationprivilege-escalation+2

21 days ago

bombini

bombinisecurity/bombini

eBPF Security Monitoring and Sandboxing Agent Based on Aya

container-securitydefensive-toolsintrusion-detection

8016 days ago

ARES

mafifrizi/ares

Autonomous red-team engagement platform with MITRE ATT&CK module orchestration, DAG attack-path solving, OPSEC controls, encrypted credential vault,…

cloud-securitycommand-and-controldefensive-tools+5

8223 days ago

CVE-2026-42978-PoC-Research

syntaxmethod/cve-2026-42978-poc-research

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module…

defensive-toolseducationexploitation+5

361 month ago

CVE-2026-41089-Netlogon

zerodayvpn/cve-2026-41089-netlogon

🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack…

defensive-toolseducationexploitation+5

41 month ago

copy_fail

spensercai/copy_fail

Rust exploit PoC for Linux kernel LPE CVE-2026-31431 (AF_ALG page-cache write) plus eBPF runtime defense blocking AF_ALG socket creation via LSM or…

binary-exploitationdefensive-toolsexploitation+4

36 months ago

Copy-Fail_Detect_and_mitigate_CVE-2026-31431

webhosting4u/copy-fail_detect_and_mitigate_cve-2026-31431

Detects exposure to CVE-2026-31431 (Copy Fail) and optionally mitigates by disabling the vulnerable algif_aead kernel module, providing verdicts and…

configuration-auditingdefensive-toolsincident-response+1

26 months ago

copyfail

kwilck/copyfail

Copy Fail (CVE-2026-31431) is a logic flaw in the Linux kernel's algif_aead module — part of the AF_ALG userspace crypto API. It was disclosed on…

configuration-auditingdefensive-toolsprivilege-escalation+2

16 months ago

Previous12 3 Next

Tools

cve-2026-99999-audit

mitigate-cve-2026-98432

cve-2026-98432-dkms

CVE-2026-92956__vm2__test__20261012

Rusty-Stealer-Keylogger-Screen-Streaming-Service-Persistence-Defender-Evasion-Analysis

nxc-vulnscan

Locksmith2

CVE-2026-85315

CVE-2026-63292

ReflectivePluginLoader

CVE-2026-42978-PoC-Research

bombini

ARES

CVE-2026-42978-PoC-Research

CVE-2026-41089-Netlogon

copy_fail

Copy-Fail_Detect_and_mitigate_CVE-2026-31431

copyfail

CVE-2026-92956vm2test__20261012