Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

579 results

CVE-2019-5420

eremiel/cve-2019-5420

Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…

encryption-decryption-toolsexploitationpassword-attacks+3

5 years ago

CVE-2024-25277

maen08/cve-2024-25277

Resources and PoCs

encryption-decryption-toolsexploitationpassword-attacks+3

2 years ago

spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE

shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-release

Centralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…

api-securityauthentication-authorizationcloud-security+3

1 year ago

xlsx

weareu/xlsx

SheetJS xlsx 0.18.5 fork with CVE-2023-30533 and CVE-2024-22363 fixes

data-recoveryencryption-decryption-toolsgeneral-purpose-utilities+1

7 months ago

CVE-2018-0114

starry-lord/cve-2018-0114

Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.

authenticationencryption-decryption-toolsexploitation+2

5 years ago

KeePass-TriggerLess

digital-dev/keepass-triggerless

KeePass 2.53.1 with removed ECAS Trigger System Remediating CVE-2023-24055

authenticationdata-recoveryencryption-decryption-tools+3

3 years ago

dromara__hutool_CVE-2018-17297_4-1-1111

shoucheng3/dromara__hutool_cve-2018-17297_4-1-1111

Comprehensive Java utility library providing modules for cryptography, HTTP client, caching, JSON, scripting, and captcha generation, simplifying…

captcha-bypasscryptographyencryption-decryption-tools+3

1 year ago

tough-cookie-patch-cve-2023-26136

guy2610/tough-cookie-patch-cve-2023-26136

RFC6265-compliant cookie parsing and CookieJar management library for Node.js, with CVE-2023-26136 security patch. Supports cookie creation,…

authenticationencryption-decryption-toolsgeneral-purpose-utilities+2

1 year ago

external_zlib-1.2.7_CVE-2018-25032

satheesh575555/external_zlib-1.2.7_cve-2018-25032

General-purpose data compression library implementing the zlib, deflate, and gzip formats, providing compression and decompression routines for…

encryption-decryption-toolsgeneral-purpose-utilitiesvulnerability-analysis

3 years ago

cve-2003-0282

sionnx/cve-2003-0282

Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.

data-recoveryencryption-decryption-toolsgeneral-purpose-utilities+2

6 years ago

gEnclave

renich/genclave

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…

authenticationcryptographyencryption-decryption-tools+7

5 days ago

polychrome-rs

dovelus/polychrome-rs

A PoC on how to use a Compute Shader as Payload

defensive-toolsencryption-decryption-toolsexploitation+5

410 days ago

Archived

tink

tink-crypto/tink

Multi-language cryptographic library providing AEAD, MAC, digital signature, and hybrid encryption APIs designed to reduce common cryptographic…

authenticationcryptographyencryption-decryption-tools

13.5k2 years ago

Archived

fastjson

alibaba/fastjson

FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.

encryption-decryption-toolsgeneral-purpose-utilities

25.6k2 months ago

Archived

remcos-decoder

cisco-talos/remcos-decoder

Talos Decryptor POC for Remcos RAT version 2.0.5 and earlier

encryption-decryption-toolsmalware-analysispayload-development+2

248 years ago

Archived

WEASEL

facebookarchive/weasel

DNS covert channel implant for Red Teams.

command-and-controldns-analysisencryption-decryption-tools+5

7316 years ago

Archived

Depixelization_poc

spipm/depixelization_poc

Depix is a PoC for a technique to recover plaintext from pixelized screenshots.

data-recoveryencryption-decryption-toolsforensics+3

4.5k5 months ago

Archived

https-everywhere

efforg/https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

defensive-toolsencryption-decryption-toolsprivacy+1

3.4k3 years ago

Previous 1…313233 Next