Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

213 results

cisco_asa_research

jbaines-r7/cisco_asa_research

Cisco ASA Software and ASDM Security Research

exploitationexploit-frameworksinformation-gathering+7

3 years ago

cloudrasp-log4j2

boundaryx/cloudrasp-log4j2

一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.

defensive-toolsexploit-frameworksvulnerability-analysis+1

1264 years ago

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

34zy/microsoft-office-word-mshtml-remote-code-execution-exploit

CVE-2021-40444

exploitationexploit-frameworkspayload-development+4

654 years ago

Thunderstorm

joelgmsec/thunderstorm

Modular framework to exploit UPS devices

exploitationexploit-frameworkshardware-iot-security+4

643 years ago

cve-2026-26114-poc

huynambka/cve-2026-26114-poc

command-and-controlexploitationexploit-frameworks+5

231 month ago

CVE-2022-39197-POC

xzajyjs/cve-2022-39197-poc

CVE-2022-39197(CobaltStrike XSS <=4.7) POC

command-and-controlexploit-frameworkspenetration-testing+3

463 years ago

pentest_teamcity

kacperszurek/pentest_teamcity

Pentest TeamCity using Metasploit

exploit-frameworkspayload-generationpenetration-testing+3

458 years ago

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

jgoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then…

exploitationexploit-frameworksios-security+8

417 months ago

nGixshell

mateusverass/ngixshell

nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)

command-and-controlexploit-frameworkspayload-development+8

223 months ago

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

akucybersec/cve-2022-1329-wordpress-elementor-3.6.0-3.6.1-3.6.2-remote-code-execution-exploit

exploit-frameworkspayload-developmentpenetration-testing+3

234 years ago

fortilogger_arbitrary_fileupload

erberkan/fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload (Metasploit)

exploitationexploit-frameworkspenetration-testing+2

235 years ago

CVE-2021-36260-metasploit

taroballzchen/cve-2021-36260-metasploit

the metasploit script(POC) about CVE-2021-36260

command-and-controlexploitationexploit-frameworks+3

204 years ago

sqlmap-nu11secur1ty

nu11secur1ty/sqlmap-nu11secur1ty

Professional extension of sqlmap project

exploit-frameworkspayload-generationpenetration-testing+2

121 month ago

CVE-2021-22005-metasploit

taroballzchen/cve-2021-22005-metasploit

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

exploitationexploit-frameworkspayload-development+3

224 years ago

CVE-2021-21972

taroballzchen/cve-2021-21972

CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script

exploitationexploit-frameworkspayload-development+3

195 years ago

annotated-fbi-tbb-exploit

vlad902/annotated-fbi-tbb-exploit

Annotated FBI exploit for the Tor Browser Bundle from mid-2013 (CVE-2013-1690)

exploitationexploit-frameworksvulnerability-analysis+1

1512 years ago

RedRoot

agampreet-singh/redroot

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

ctfexploit-frameworksfuzzing+9

174 months ago

CVE-2019-0708

victor0013/cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

exploitationexploit-frameworksnetwork-security+3

37 years ago

Previous 1…345…12 Next