Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

191 results

DarkSword_analysis

stationedk-06/darksword_analysis

Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)

binary-analysiseducationexploit-frameworks+5

5 months ago

CVE-2023-33538-msf

mrowkoob/cve-2023-33538-msf

CVE-2023-33538 - TP-Link Command Injection Ruby module for Metasploit Framework

command-and-controleducationexploit-frameworks+3

11 year ago

ollama-consumer

dannyendortest/ollama-consumer

Demo consumer for ollama v0.5.0 (vulnerable range for CVE-2024-12886) — endorctl scan target

educationexploit-frameworkssupply-chain-security+1

3 months ago

CVE-2010-2883

avielzecharia/cve-2010-2883

Proof-of-concept exploit for CVE-2010-2883 using buffer overflow, ROP chain, and heap spraying techniques, with Metasploit integration for…

binary-exploitationeducationexploitation+4

111 months ago

Metasploit-Exploits-CVE-2023-6710

dedsec-47/metasploit-exploits-cve-2023-6710

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration…

educationexploit-frameworkspayload-development+4

12 years ago

chakra-exploit-framework

ntdelta/chakra-exploit-framework

Browser exploitation framework for Chakra (Edge). Written as part of OSEE preparation. Demo bug: CVE-2019-0567

binary-exploitationeducationexploit-frameworks+6

11 year ago

vulnerable-bsr-lab-CVE-2023-6933

trex96/vulnerable-bsr-lab-cve-2023-6933

Hands-on lab for CVE-2023-6933, a PHP Object Injection vulnerability in Better Search Replace WordPress plugin, with Docker deployment, nuclei…

educationexploit-frameworkslabs-practice+3

11 months ago

react-rce

randarts/react-rce

CVE-2025-55182 취약점에 대한 샘플을 AI와 함께 작성 및 테스트 했습니다.

educationexploit-frameworkslabs-practice+3

8 months ago

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

nyambiblaise/domain-controller-dc-exploitation-with-metasploit-impacket

End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes,…

educationexploit-frameworkslabs-practice+6

10 months ago

CVE-2024-38077-MadLicense-exploit

ermensonx/cve-2024-38077-madlicense-exploit

Modular exploit framework for CVE-2024-38077 (Windows RDL heap overflow) with ASLR bypass, heap grooming, ROP chain generation, and DLL injection…

binary-exploitationeducationexploitation+6

18 months ago

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

simoesctt/chrono-drip-temporal-viscosity-exploitation-framework-cve-2022-0847

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

binary-exploitationeducationexploitation+8

6 months ago

CVE-2019-9766

moonheadobj/cve-2019-9766

CVE-2019-9766 React

binary-exploitationeducationexploitation+6

16 years ago

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

mrk336/snmpocalypse-cisco-bug-lets-hackers-crash-or-command-devices

CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash…

educationexploitationexploit-frameworks+3

11 months ago

Vulnerability-Assessment-Exploitation-Lab

mirza-22144/vulnerability-assessment-exploitation-lab

Full-lifecycle penetration test of a legacy Linux environment (Metasploitable 2) emulated on Apple Silicon. Demonstrating network reconnaissance, RCE…

cryptographyeducationexploitation+9

7 months ago