Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

3289 results

Lab-for-cve-2018-15133

cr4zyd14m0nd137/lab-for-cve-2018-15133

Ejecución de exploit de deserialización con CVE-2017-5941

educationexploitationlabs-practice+3

3 years ago

CVE-2024-52375

nxploited/cve-2024-52375

WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

educationexploitationpayload-generation+3

1 year ago

Internet-Security-Project---CVE-2021-26814

paolorabbito/internet-security-project---cve-2021-26814

Educational exploit demonstration for CVE-2021-26814 targeting Wazuh v4.0.3, with step-by-step exploitation and remediation code for university-level…

code-analysiseducationexploitation+3

4 years ago

IT19115276

kiruthikan99/it19115276

SNP Assignment 1 Report - Linux box exploitation ( Vulnerability CVE-2014-0038)

educationexploitationlabs-practice+2

6 years ago

CVE-2024-2389

adhikara13/cve-2024-2389

Python script that exploits CVE-2024-2389 in Progress Kemp Flowmon to execute arbitrary commands and establish a reverse shell via the…

educationexploitationremote-access-tool+2

22 years ago

CVE-2022-46169

taythebot/cve-2022-46169

CVE-2022-46169 - Cacti Blind Remote Code Execution (Pre-Auth)

educationexploitationpenetration-testing+3

13 years ago

jboss-deserialization

xcatolin/jboss-deserialization

JBoss CVE-2017-12149 (Insecure Deserialization - RCE) Exploitation Lab.

educationexploitationlabs-practice+3

5 years ago

CVE-2022-42889-POC

korteke/cve-2022-42889-poc

A simple application that shows how to exploit the CVE-2022-42889 vulnerability

educationexploitationpayload-development+3

103 years ago

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

ihhgimhana/react2shell-cve-2025-55182-poc-reverse-shell

This is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.

educationexploitationpayload-generation+4

310 months ago

CVE-2021-42327

docfate111/cve-2021-42327

kernel exploit POC for vulnerability i found in amd gpu driver

binary-exploitationeducationexploitation+1

103 years ago

CVE-2022-42889-POC

akshayithape-devops/cve-2022-42889-poc

A simple dockerize application that shows how to exploit the CVE-2022-42889 vulnerability.

educationexploitationlabs-practice+3

54 years ago

blueborne-CVE-2017-1000251-POC

own2pwn/blueborne-cve-2017-1000251-poc

Proof-of-concept exploit for BlueBorne vulnerability CVE-2017-1000251 targeting Bluetooth stack. Demonstrates remote code execution possibility. For…

bluetooth-securityeducationexploitation+1

59 years ago

CVE-2024-50379-POC

dragonked2/cve-2024-50379-poc

This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a…

educationexploitationpayload-generation+3

41 year ago

CVE-2018-10933

xfreed0m/cve-2018-10933

a python script to exploit libssh authentication vulnerability

educationexploitationnetwork-security+2

36 years ago

Bitrix24DoS

jhonnybonny/bitrix24dos

This Python script is designed to exploit a security vulnerability in Bitrix24, leading to a Denial of Service (DoS) attack. The vulnerability,…

educationexploitationpenetration-testing+2

42 years ago

DetectPacket-CVE-2017-8464

trg-1999/detectpacket-cve-2017-8464

Exploit vulnerabilities and vulnerability prevention implementation

educationexploitationforensics+6

34 years ago

Copy-Fail-CVE-2026-31431-modernized

eynaexp/copy-fail-cve-2026-31431-modernized

Proof-of-concept exploit for CVE-2026-31431, modernized from the original Copy Fail PE exploit. Demonstrates the vulnerability for educational…

educationexploitationpapers-research+2

35 months ago

cybersecurity-struts2

sighup1/cybersecurity-struts2

Struts2 Application Vulnerable to CVE-2017-5638. Explains how the exploit of the vulnerability works in relation to OGNL and the JakartaMultiPart…

educationexploitationpayload-development+3

17 years ago

Previous 1 234…100 Next