Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
30 results
tryhackme-moniker-link preview

tryhackme-moniker-link

GitHubyfelipecruvinel/tryhackme-moniker-link

Documentation of my hands-on lab Moniker Link (CVE-2024-21413) completed on TryHackMe.

educationemail-securityexploitation+3
1 month ago
TryHack3M-Bricks-Heist preview

TryHack3M-Bricks-Heist

GitHubanjai7/tryhack3m-bricks-heist

TryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification

ctfdigital-forensicseducation+5
1 year ago
thm_steelmountain_CVE-2014-6287 preview

thm_steelmountain_CVE-2014-6287

GitHubmrintern/thm_steelmountain_cve-2014-6287

a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of…

binary-exploitationctfeducation+3
14 years ago
thm-Moniker-Link-cve-2024-21413-writeup preview

thm-Moniker-Link-cve-2024-21413-writeup

GitHubshauryarathore357-hub/thm-moniker-link-cve-2024-21413-writeup

TryHackMe room walkthrough of CVE-2024-21413, covering the Outlook Moniker Link Protected View bypass, NTLM hash leaking, and credential capture with…

ctfeducationexploitation+6
19 days ago
ZeroScout preview

ZeroScout

GitHubsumidcyber/zeroscout

🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…

defensive-toolsdigital-forensicseducation+7
1210 months ago
THM-Vulnerability_Capstone-CVE-2018-16763 preview
Archived

THM-Vulnerability_Capstone-CVE-2018-16763

GitHubwizardy0ga/thm-vulnerability_capstone-cve-2018-16763

A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763.

ctfeducationexploitation+5
4 years ago
BreakEscape preview

BreakEscape

GitHubcliffe/breakescape

Mountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…

ctfeducationlabs-practice+3
61 day ago
BUGS_OOM_NULL_PTR_DEREF preview

BUGS_OOM_NULL_PTR_DEREF

GitHubspiralbl0ck/bugs_oom_null_ptr_deref

BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ

android-securitybinary-exploitationeducation+1
12 years ago
solar-exploiting-log4j preview

solar-exploiting-log4j

GitHublavanya2085/solar-exploiting-log4j

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell…

ctfeducationexploitation+4
6 months ago
THM-Source-CVE-2019-15231 preview
Archived

THM-Source-CVE-2019-15231

GitHubwizardy0ga/thm-source-cve-2019-15231

A write up on the TryHackMe room Source & a python script to exploit the vulnerability

ctfeducationexploitation+3
4 years ago
CVE-2021-44228_PoC preview

CVE-2021-44228_PoC

GitHubab0x90/cve-2021-44228_poc

Python proof-of-concept for CVE-2021-44228 (Log4Shell) that automates exploitation via a crafted Java payload, with argparse options for customizable…

educationexploitationpayload-generation+3
164 years ago
monikerlink-cve-2024-21413-writeup preview

monikerlink-cve-2024-21413-writeup

GitHubpczbuilds/monikerlink-cve-2024-21413-writeup

Writeup of TryHackMe's Moniker Link room, exploiting CVE-2024-21413 to bypass Outlook Protected View and capture NTLMv2 hashes via crafted Moniker…

ctfeducationexploitation+2
13 days ago
CPSC253_CybersecurityFinalProjectReports preview

CPSC253_CybersecurityFinalProjectReports

GitHubbunbuncodes/cpsc253_cybersecurityfinalprojectreports

Report written on CVE-2024-38112

curated-resourceseducationlearning-paths-courses+2
1 year ago
Active-Directory-BadSuccessor preview

Active-Directory-BadSuccessor

GitHubmusa-xvi/active-directory-badsuccessor

A TryHackme room covering the CVE-2025-53779 exploitation using windows

authenticationctfeducation+6
4 months ago
SVPT_CW_2 preview

SVPT_CW_2

GitHubkartheekkandalam99/svpt_cw_2

CVE-2024-21413 Setup for CW

ctfeducationexploitation+3
2 years ago
THM---Solar-exploiting-Log-4j preview

THM---Solar-exploiting-Log-4j

GitHubsaru1718/thm---solar-exploiting-log-4j

This room is based on exploiting the notorious Log4j vulnerability ( CVE-2021-44228), also referred to as the Log4Shell. The weakness enables…

educationexploitationids-ips-evasion+7
6 months ago
mysqli preview

mysqli

GitHubrgkue/mysqli

Time-Based Blind SQL Injection tool for MySQL - CVE-2019-9053

ctfeducationpassword-cracking+3
3 months ago
CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat- preview

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

GitHubtheopaid/cve-2026-66751-insufficient-access-controls-allow-for-unauthorized-room-deletion-let-s-chat-

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)

authentication-authorizationcode-analysiseducation+2
2 months ago
Previous12Next