Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

297 results

Archived

CVE-2010-0232

azorfus/cve-2010-0232

Development of an exploit for privilege escalation in Windows systems ( NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 ) using the vulnerability CVE-2010-0232

binary-exploitationeducationexploitation+3

3 years ago

CVE-2023-27326

impalabs/cve-2023-27326

VM Escape for Parallels Desktop <18.1.1

binary-exploitationcontainer-escapeexploitation+3

1723 years ago

cve-2025-24054

fomovet/cve-2025-24054

POC for CVE-2025-24054

command-and-controlexploitationexploit-frameworks+3

4 months ago

cve-2017-0143

benguelmas/cve-2017-0143

Educational demonstration of exploiting CVE-2017-0143 (EternalBlue) on Windows 7 using Metasploit in a controlled lab environment for penetration…

educationexploitationexploit-frameworks+3

1 year ago

CVE-2017-10271

kkirsche/cve-2017-10271

Python and Metasploit exploit for Oracle WebLogic WLS-WSAT deserialization vulnerability (CVE-2017-10271) with detection scanning and remote code…

exploitationexploit-frameworkspayload-generation+3

1284 years ago

CVE-2016-0801

abdsec/cve-2016-0801

C-based proof-of-concept exploit for CVE-2016-0801, demonstrating a specific vulnerability in Android components for security research and testing.

binary-exploitationexploitationexploit-frameworks+2

7810 years ago

CVE-2018-3252

go-spider/cve-2018-3252

Exploit for CVE-2018-3252 targeting WebLogic deserialization vulnerability. Includes payload generation with ysoserial and a Python proof-of-concept…

binary-exploitationexploit-frameworkspayload-development+3

187 years ago

cobaltstrike_swing_xss2rce

hluwa/cobaltstrike_swing_xss2rce

Exploit for CVE-2022-39197, a cross-site scripting vulnerability in Cobalt Strike's Swing GUI that enables remote code execution on team servers.

command-and-controlexploit-frameworkspenetration-testing+3

74 years ago

cve_2016_0728

kennetham/cve_2016_0728

Proof-of-concept exploit for CVE-2016-0728, a Linux kernel vulnerability enabling local privilege escalation via keyctl subsystem.

binary-exploitationexploitationexploit-frameworks+2

310 years ago

CVE-2021-27877-PoC

yashswarup12/cve-2021-27877-poc

A modified version of the Rapid7 Metasploit module for CVE-2021-27877 that supports direct command execution for reliable vulnerability validation.…

educationexploitationexploit-frameworks+3

3 months ago

copyfail

polyakovavv/copyfail

C-based local privilege escalation exploit for CVE-2026-31431, a Linux kernel vulnerability in the AF_ALG crypto interface, providing root access via…

binary-exploitationeducationexploitation+3

5 months ago

CVE-2026-49083

87achrafg-stack/cve-2026-49083

Python exploit for CVE-2026-49083, a privilege escalation vulnerability in the LatePoint Calendar Booking WordPress plugin, enabling unauthorized…

exploitationexploit-frameworkspenetration-testing+3

4 months ago

CVE-2026-20700-POC-that-ll-never-work

notthemystery/cve-2026-20700-poc-that-ll-never-work

Proof-of-concept exploit for CVE-2026-20700, demonstrating a specific vulnerability with a binary exploitation payload for security testing and…

binary-exploitationexploitationexploit-frameworks+3

4 months ago

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

simoesctt/ctt-exchange-rce-v1.0---microsoft-exchange-exploit-cvss-10.0-critical-cve-2021-26855-cve-2021-27065

CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell/ProxyLogon), another CVSS 10.0 critical vulnerability that…

command-and-controlexploitationexploit-frameworks+7

18 months ago

pwnkit

oreosec/pwnkit

Exploit for CVE-2021-4034, a memory corruption vulnerability in pkexec of polkit, enabling local privilege escalation to root on Linux systems.

binary-exploitationexploitationexploit-frameworks+2

14 years ago

msf-cve-2024-46987

bootstrapbool/msf-cve-2024-46987

Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions 2.8.0 through 2.8.2 and 2.9.0

exploitationexploit-frameworkspenetration-testing+2

6 months ago

CVE-2015-1578-PoC-Metasploit

yaldobaoth/cve-2015-1578-poc-metasploit

This is a proof-of-concept Metasploit module exploit for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation…

binary-exploitationexploitationexploit-frameworks+6

1 year ago

exim-vuln-poc

c0llision/exim-vuln-poc

Proof-of-concept exploit for CVE-2018-6789, a buffer overflow vulnerability in Exim mail server, enabling remote code execution via crafted messages.

binary-exploitationexploitationexploit-frameworks+2

8 years ago

Previous 1 234…17 Next