Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

3289 results

n8n-CVE-2025-68613-exploit

wioui/n8n-cve-2025-68613-exploit

CVE-2025-68613: n8n RCE vulnerability exploit and documentation

educationexploitationpayload-development+3

105

10 months ago

CVE-2023-37582_EXPLOIT

malayke/cve-2023-37582_exploit

Apache RocketMQ Arbitrary File Write Vulnerability Exploit

educationexploitationpayload-generation+3

473 years ago

lazylist-cve-poc

yarocher/lazylist-cve-poc

POC for the CVE-2022-36944 vulnerability exploit

binary-exploitationeducationexploitation+2

113 years ago

CVE-2024-1071-PoC-Script

spid3hex/cve-2024-1071-poc-script

wp/ultimate-member - SQL Injection Vulnerability Exploit Script.

educationexploitationpenetration-testing+2

21 year ago

CVE-2023-28432

bitwiz4rd/cve-2023-28432

PoC MinIO vulnerability exploit

educationexploitationinformation-gathering+3

21 year ago

log4shell-example

chilit-nl/log4shell-example

The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.

code-analysiseducationexploitation+3

4 years ago

CVE-2023-50387

pablodiz/cve-2023-50387

DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched…

dns-analysiseducationexploitation+3

1 year ago

CVE-2024-23692_Exploit

999gawkboyy/cve-2024-23692_exploit

HFS 2.3m SERVER RCE Vulnerability exploit

educationexploitationpenetration-testing+2

1 year ago

spring4shell-exploit-poc

fourcorelabs/spring4shell-exploit-poc

Exploit a vulnerable Spring application with the Spring4Shell (CVE-2022-22965) Vulnerability.

educationexploitationpayload-generation+3

444 years ago

CVE-2017-5123

0x5068656e6f6c/cve-2017-5123

Exploits Linux kernel CVE-2017-5123 to achieve local privilege escalation; includes C source, static build instructions, and a write-up on the…

binary-exploitationeducationexploitation+1

58 years ago

CVE-2021-4773

alexs18/cve-2021-4773

Step-by-step tutorial demonstrating how to set up a vulnerable Apache 2.4.49 environment and exploit CVE-2021-41773 path traversal using Kali Linux…

educationexploitationlabs-practice+3

11 months ago

SSI-CVE-2022-21661

wellingtonespindula/ssi-cve-2022-21661

Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3.

educationexploitationlabs-practice+3

62 years ago

EternalBlueC

bhassani/eternalbluec

EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar…

binary-exploitationeducationexploitation+7

6191 month ago

exocomp

cookiengineer/exocomp

Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate…

ai-securitycode-analysiseducation+8

2113 days ago

CVE-2016-6516-exploit

wpengfei/cve-2016-6516-exploit

An demonstration of how to exploit double-fetch vulnerability CVE-2016-6516

binary-exploitationeducationexploitation+2

98 years ago

appsec-forge

appsec-forge/appsec-forge

Structured security knowledge base with production-inspired cases: vulnerability analysis, exploit explanation, remediation, and DevSecOps for…

ai-securitycloud-securitycontainer-security+7

1 month ago

five-nights-at-follina-s

jeffreybxu/five-nights-at-follina-s

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and…

defensive-toolseducationexploitation+4

24 years ago

Laravel-CVE-2018-15133

yeahhbean/laravel-cve-2018-15133

Docker-based PoC environment for CVE-2018-15133 Laravel APP_KEY unserialization vulnerability. Includes exploit script to verify remote code…

educationexploitationlabs-practice+3

21 year ago

Previous12…100 Next