Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

9249 results

authorship-not-sabotage

shubsds/authorship-not-sabotage

Code and paper source for a NeurIPS EvoRobust study showing simple bag-of-words and metadata features beat most AI control monitors at detecting…

ai-securitycode-analysiseducation+3

3 days ago

CVE-2024-47066

eqstlab/cve-2024-47066

Lobe Chat Server-Side Request Forgery exploit

educationexploitationvulnerability-analysis+2

2 years ago

Information-Security-Tasks

bb1nfosec/information-security-tasks

Curated infosec knowledge base of practitioner notes, methodologies, and daily-updated CVE, news, and tool digests organized by offensive, defensive,…

curated-resourcesdigital-forensicseducation+9

1881 day ago

big-list-of-naughty-strings

minimaxir/big-list-of-naughty-strings

Curated list of malicious and edge-case input strings (blns.txt/blns.json) for QA and security testing of user-input validation, injection, and…

curated-resourceseducationfuzzing+4

47.7k2 years ago

waf-dojo

nishikawaakira/waf-dojo

Hands-on AWS WAF training game with tutorials, scored labs, and exams where players write Web ACL rules to block real attack shapes while avoiding…

cloud-securityctfdefensive-tools+7

181 day ago

CVE-2026-101259

oscerd/cve-2026-101259

Runnable proof-of-concept reproducer for CVE-2026-101259, demonstrating error-message disclosure in Apache Camel camel-coap consumers on Spring Boot…

defensive-toolseducationinformation-gathering+3

4 days ago

CVE-2026-71569

oscerd/cve-2026-71569

Runnable Docker proof-of-concept for CVE-2026-71569, an SSRF guard bypass in Apache Camel camel-a2a webhook validation, with probes and fix…

educationexploitationvulnerability-analysis+1

4 days ago

CVE-2026-90885

oscerd/cve-2026-90885

Runnable proof-of-concept reproducer for CVE-2026-90885, an XXE (CWE-611) in Apache Camel camel-saxon XQuery, with Spring Boot and Quarkus builds and…

defensive-toolseducationexploitation+2

4 days ago

CVE-2026-94386

oscerd/cve-2026-94386

Runnable Spring Boot and Quarkus reproducer for CVE-2026-94386, demonstrating cross-scope OAuth token reuse in Apache Camel camel-oauth's static…

authenticationdefensive-toolseducation+2

4 days ago

CVE-2026-95628

oscerd/cve-2026-95628

Runnable proof-of-concept reproducer for CVE-2026-95628, an absolute-path validation gap in Apache Camel camel-docling, with Spring Boot and Quarkus…

defensive-toolseducationexploitation+2

4 days ago

CVE-2026-95629

oscerd/cve-2026-95629

Runnable proof-of-concept reproducer for CVE-2026-95629, a path-traversal flaw in Apache Camel camel-docling where the output-path header reaches…

code-analysisdefensive-toolseducation+4

4 days ago

CVE-2026-95663

oscerd/cve-2026-95663

Runnable proof-of-concept reproducer for CVE-2026-95663, where Apache Camel camel-keycloak served cached token introspection results past token…

authenticationdefensive-toolseducation+2

4 days ago

CVE-2026-95664

oscerd/cve-2026-95664

Runnable Spring Boot and Quarkus reproducer for CVE-2026-95664, demonstrating Simple expression injection via the CamelAwsS3Key header in…

defensive-toolseducationexploitation+2

4 days ago

ATTACK-Tools

nshalabi/attack-tools

SQLite relational data model for MITRE ATT&CK plus an adversary emulation planning tool, enriched with Red Canary ATOMIC tests and APT3 emulation…

adversarial-attackcurated-resourcesdatabase-security+5

1.1k10 months ago

mcp-reverse

1llu50ry/mcp-reverse

MCP server exposing 180+ reverse-engineering tools that aggregate Ghidra, IDA, x64dbg, Frida and 56 other backends with native binary parsers and a…

ai-assisted-reversingbinary-analysisctf+9

4164 days ago

vulnerability-Checklist

az0x7/vulnerability-checklist

Curated collection of web and API vulnerability checklists covering XSS, SQLi, CSRF, IDOR, authentication bypass, file upload, and bug bounty testing…

api-securityauthentication-authorizationcurated-resources+6

3.7k2 years ago

OffensiveReverseShellCheatSheet

d4t4s3c/offensivereverseshellcheatsheet

Curated cheat sheet of reverse shell payloads in Bash, Netcat, PHP, PowerShell, Python, Perl, Ruby, and msfvenom, plus webshells, log poisoning, and…

command-and-controlcurated-resourceseducation+8

5461 year ago

AI-Red-Teaming-Guide

requie/ai-red-teaming-guide

A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before attackers…

adversarial-attackai-securitycurated-resources+9

1.0k4 days ago

Previous12…100 Next