Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

297 results

Exploiting-Samba-on-Metasploitable-2

vig9610/exploiting-samba-on-metasploitable-2

Utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability (CVE-2007-2447). This is done in order to infiltrate a…

educationexploitationexploit-frameworks+8

7 months ago

CVE-2025-8088-EXP

hbesljx/cve-2025-8088-exp

One-click payload generator for WinRAR vulnerability CVE-2025-8088, enabling rapid exploit deployment and testing.

exploitationexploit-frameworkspayload-generation+2

1 year ago

JNDI-Injection-Exploit-Plus

cckuailong/jndi-injection-exploit-plus

Generates workable JNDI injection links and deserialization payloads with 80+ gadgets, supporting RMI, LDAP, and HTTP servers for automated…

exploit-frameworkspayload-developmentpenetration-testing+2

8892 years ago

CVE-2021-4034

ayrx/cve-2021-4034

Exploit for CVE-2021-4034 (PwnKit) that leverages a race condition in pkexec to escalate privileges to root on Linux systems.

binary-exploitationexploitationexploit-frameworks+2

914 years ago

CVE-2021-4034

joyghoshs/cve-2021-4034

Exploit for Local Privilege Escalation Vulnerability in polkit’s pkexec

exploitationexploit-frameworksprivilege-escalation+1

14 years ago

CVE-2025-38248_EXP

guard-wait/cve-2025-38248_exp

C exploit for CVE-2025-38248 supporting ROP and data-only attack techniques for binary exploitation research and vulnerability verification.

binary-exploitationexploitationexploit-frameworks+2

7 months ago

BlueToolkit

sgxgsx/bluetoolkit

Modular Bluetooth Classic (BR/EDR) vulnerability testing framework with reconnaissance, exploit modules for 43 public attacks/CVEs, and structured…

bluetooth-securitycurated-resourcesexploitation+5

7421 month ago

Apache-Dubbo-Hessian2-CVE-2021-43297

longofo/apache-dubbo-hessian2-cve-2021-43297

Demonstrates a proof-of-concept exploit for CVE-2021-43297, a deserialization vulnerability in Apache Dubbo's Hessian2 protocol, with provider and…

binary-exploitationexploitationexploit-frameworks+2

464 years ago

CVE-2025-24203-iOS-Exploit-With-Error-Logging

geosn0w/cve-2025-24203-ios-exploit-with-error-logging

Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero

binary-exploitationexploitationexploit-frameworks+4

410 years ago

CVE-2021-1965

foxtrot/cve-2021-1965

Proof-of-concept exploit for CVE-2021-1965, a Wi-Fi vulnerability, leveraging libwifi for packet parsing and crafted for educational purposes.

binary-exploitationexploitationexploit-frameworks+2

34 years ago

CopyFail-CVE-2026-31431

jnamerz/copyfail-cve-2026-31431

C implementation of a proof-of-concept exploit for CVE-2026-31431, demonstrating the vulnerability and providing a compile-and-run exploit for…

binary-exploitationexploitationexploit-frameworks+2

25 months ago

CVE-2023-1281

lanleft/cve-2023-1281

Proof-of-concept exploit for CVE-2023-1281, a use-after-free vulnerability in the Linux kernel traffic control index filter (tcindex), demonstrating…

binary-exploitationexploitationexploit-frameworks+1

2 months ago

CVE-2019-2215

codecat007/cve-2019-2215

Proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Android binder driver enabling local privilege escalation on…

android-securitybinary-exploitationexploitation+4

7 years ago

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

bhathiya404/exploiting-stagefright-vulnerability-cve-2015-3864

Exploit implementation for Android Stagefright vulnerability CVE-2015-3864, enabling remote code execution and privilege escalation on Android 5.1.1…

android-securitybinary-exploitationexploitation+5

3 years ago

CVE-2023-0179-PoC

turtlearm/cve-2023-0179-poc

Exploit for CVE-2023-0179, a stack buffer overflow in the Linux nftables subsystem, enabling unprivileged local privilege escalation to root via…

binary-exploitationexploitationexploit-frameworks+2

2142 years ago

launchd-portrep

bazad/launchd-portrep

CVE-2018-4280: Mach port replacement vulnerability in launchd on macOS 10.13.5 leading to local privilege escalation and SIP bypass.

binary-exploitationexploitationexploit-frameworks+3

597 years ago

CVE-2023-27326

malwareman007/cve-2023-27326

VM Escape for Parallels Desktop <18.1.1

binary-exploitationexploitationexploit-frameworks+4

373 years ago

CVE-2025-24071-msfvenom

folks-iwd/cve-2025-24071-msfvenom

Metasploit module for CVE-2025-24071 - Windows NTLM Hash Leak via .library-ms

exploitationexploit-frameworkspassword-attacks+2

251 year ago

Previous 123…17 Next