Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
12 results
CVE-2026-42527 preview

CVE-2026-42527

GitHuboscerd/cve-2026-42527

Reproducer for CVE-2026-42527 — Apache Camel permissive default ObjectInputFilter admits java.net.URL, enabling a DNS-based out-of-band side channel

data-exfiltrationdns-analysisexploitation+3
3 months ago
CVE-2026-27831-POC preview

CVE-2026-27831-POC

GitHubbluedragonsecurity/cve-2026-27831-poc

Poc Exploit for CVE-2026-27831 - vulnerability discovered by : Antonius

dns-analysisexploitationnetwork-security+1
58 months ago
CVE-2026-34835-Black-box-Analysis preview

CVE-2026-34835-Black-box-Analysis

GitHubcyber-note/cve-2026-34835-black-box-analysis

A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…

dns-analysiseducationpenetration-testing+3
63 months ago
CVE-2026-33634-Scanner preview

CVE-2026-33634-Scanner

GitHubfevar54/cve-2026-33634-scanner

Scanner de IOCs del ataque de cadena de suministro TeamPCP (CVE-2026-33634).

dns-analysisincident-responseioc-management+4
7 months ago
netty-resolver-dns-check preview

netty-resolver-dns-check

GitHubxiaoqimikko/netty-resolver-dns-check

Offline static checker that inspects packaged Java jars for vulnerable netty-resolver-dns versions and detects whether Spring WebClient actually uses…

configuration-auditingdefensive-toolsdns-analysis+5
1 month ago
CVE-2026-81642 preview

CVE-2026-81642

GitHubsuominen/cve-2026-81642

Single-page tracker recording per-distribution patch status for CVE-2026-81642, the Unbound DNSSEC validator heap overflow and ReTrap complexity…

dns-analysisthreat-intelligencevulnerability-analysis
4 days ago
CVE-2026-51385 preview

CVE-2026-51385

GitHubarturo0x90/cve-2026-51385

Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385,…

dns-analysiseducationexploitation+2
3 months ago
cve-2026-5950-bind9-resolver-dos preview

cve-2026-5950-bind9-resolver-dos

GitHubbillybaraja/cve-2026-5950-bind9-resolver-dos

Defensive research notes for CVE-2026-5950, a BIND 9 resolver DoS vulnerability credited to Billy Baraja (BielraX).

defensive-toolsdns-analysiseducation+3
14 months ago
dnsmasq-cve-2026 preview

dnsmasq-cve-2026

GitHubjianrongxiao-linksys/dnsmasq-cve-2026

Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)

binary-analysisdns-analysisexploitation+4
5 months ago
CVE-2026-50980 preview

CVE-2026-50980

GitHubbugresearch/cve-2026-50980

oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking

dns-analysisexploitationvulnerability-analysis+2
3 months ago
CVE20265172poc preview

CVE20265172poc

GitHublottiedeyan/cve20265172poc

CVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC

binary-exploitationdns-analysisexploitation+3
5 months ago
dns_client_fuzzing preview

dns_client_fuzzing

GitHubpersonnumber3377/dns_client_fuzzing

Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.

binary-analysisdns-analysisexploitation+2
4 months ago