Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
Agent-Security-Regression-Harness preview

Agent-Security-Regression-Harness

GitHubowasp/agent-security-regression-harness

Executable security regression testing for agentic applications and MCP-integrated systems.

ai-securityapi-security-testingcode-analysis+4
48
29 days ago
OSWE-Labs-Poc preview

OSWE-Labs-Poc

GitHubsvdwi/oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

ctfeducationexploitation+4
1355 years ago
Follina_MSDT_CVE-2022-30190 preview

Follina_MSDT_CVE-2022-30190

GitHubmuhammad-ali007/follina_msdt_cve-2022-30190

Educational exploit for CVE-2022-30190 (Follina) demonstrating MSDT remote code execution via malicious Office documents, with detection and…

command-and-controldefensive-toolseducation+8
13 years ago
fire-wall-server preview

fire-wall-server

GitHubnosie12/fire-wall-server

Python-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying…

defensive-toolseducationintrusion-detection+3
1 year ago
Arbitrary-File-Read-CVE-2024-24919 preview

Arbitrary-File-Read-CVE-2024-24919

GitHubluismateo1/arbitrary-file-read-cve-2024-24919

Walkthrough of detecting, investigating, and responding to a CVE-2024-24919 path traversal attack, including log analysis, threat intel checks, and…

educationexploitationincident-response+3
1 year ago
CVE-2025-42957-SAP-S-4HANA-Under-Siege preview

CVE-2025-42957-SAP-S-4HANA-Under-Siege

GitHubmrk336/cve-2025-42957-sap-s-4hana-under-siege

Educational demonstration of CVE-2025-42957: an RFC-enabled SAP S/4HANA module vulnerability allowing low-privileged ABAP injection for admin account…

educationexploitationpenetration-testing+4
311 months ago
CVE-2025-24813 preview

CVE-2025-24813

GitHubseahcy/cve-2025-24813

Instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for lazy researchers.

educationexploitationpayload-development+3
17 months ago
CVE-2020-3452 preview

CVE-2020-3452

GitHubparan0id34/cve-2020-3452

Proof-of-concept exploit for CVE-2020-3452 directory traversal vulnerability in Cisco ASA and Firepower Threat Defense appliances. Intended for…

educationexploitationpenetration-testing+2
15 years ago
mitm-proxy preview

mitm-proxy

GitHubwelfordian/mitm-proxy

Go-based MITM HTTP/HTTPS proxy for intercepting, inspecting, and replaying traffic. Features admin dashboard, AI copilot, threat scanning, caching,…

ai-securityapi-security-testingdebuggers+5
152 months ago
CitrixBleed-2-CVE-2025-5777-PoC- preview

CitrixBleed-2-CVE-2025-5777-PoC-

GitHubmingshenhk/citrixbleed-2-cve-2025-5777-poc-

Comprehensive PoC and detection toolkit for CVE-2025-5777 (CitrixBleed 2), an out-of-bounds memory read in NetScaler ADC/Gateway. Includes exploit…

defensive-toolseducationexploitation+7
171 year ago
five-nights-at-follina-s preview

five-nights-at-follina-s

GitHubjeffreybxu/five-nights-at-follina-s

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and…

defensive-toolseducationexploitation+4
24 years ago
CVE-2022-30190 preview

CVE-2022-30190

GitHubernestak/cve-2022-30190

Official guidance and workarounds for CVE-2022-30190, a remote code execution vulnerability in the Microsoft Support Diagnostic Tool (MSDT)…

defensive-toolseducationexploitation+3
4 years ago
cve-2023-5217-poc preview

cve-2023-5217-poc

GitHubut-security/cve-2023-5217-poc

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

binary-exploitationeducationexploitation+3
162 years ago
CrushFTP-AS2-Bypass-Research-CVE-2025-54309 preview

CrushFTP-AS2-Bypass-Research-CVE-2025-54309

GitHubsmileyface101/crushftp-as2-bypass-research-cve-2025-54309

Research on CrushFTP AS2 authentication bypass allowing unauthenticated admin access. Includes PoC scripts, detection rules, and technical analysis…

authenticationdefensive-toolseducation+6
8 months ago
CVE-2026-39808 preview

CVE-2026-39808

GitHuberror-inside/cve-2026-39808

Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint

command-and-controleducationexploitation+3
2 months ago
CVE-2026-8181-PoC preview

CVE-2026-8181-PoC

GitHubsquamity/cve-2026-8181-poc

Python PoC for CVE-2026-8181, a critical authentication bypass in Burst Statistics WordPress plugin. Includes exploit automation, bulk scanning, and…

authenticationdefensive-toolseducation+5
1 month ago
CVE-2017-5638-Attack-and-Defense preview

CVE-2017-5638-Attack-and-Defense

GitHubacharaf06/cve-2017-5638-attack-and-defense

Docker-based security lab demonstrating Apache Struts2 S2-045 (CVE-2017-5638) exploitation and defense, featuring vulnerable and patched applications…

defensive-toolseducationlabs-practice+4
18 months ago
CVE-2020-3187 preview

CVE-2020-3187

GitHubcappricio-securities/cve-2020-3187

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

educationexploitationinformation-gathering+3
12 years ago
Previous12Next