Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

792 results

VulnHub-DC1-Writeup

prapul1/vulnhub-dc1-writeup

VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password…

ctfeducationexploitation+9

2 months ago

CVE-2025-50154-Aggressor-Script

ash1996x/cve-2025-50154-aggressor-script

Cobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…

command-and-controlctfeducation+9

111 months ago

CVE-2025-24071-msfvenom

folks-iwd/cve-2025-24071-msfvenom

Metasploit module for CVE-2025-24071 - Windows NTLM Hash Leak via .library-ms

exploitationexploit-frameworkspassword-attacks+2

251 year ago

Offensive-lab-2

mafiosohack/offensive-lab-2

Penetration test walkthrough on a vulnerable Ubuntu VM. Exploited the ProFTPD 1.3.3c backdoor (CVE-2010-4221) to gain root access and capture the…

ctfeducationexploitation+8

9 months ago

CVE-2026-31431

vyahello/cve-2026-31431

Linux local privilege escalation exploit for CVE-2026-31431, abusing the AF_ALG crypto API with splice() to modify page cache and spawn a root shell.

binary-exploitationexploitationexploit-frameworks+3

4 months ago

AutoSploit

nullarray/autosploit

Automated Mass Exploiter

command-and-controlexploit-frameworksinformation-gathering+5

5.3k6 years ago

CVE-2026-31431-CopyFail-static-ELF--POC

rat5ak/cve-2026-31431-copyfail-static-elf--poc

Minimal 587-byte static ELF exploit for CVE-2026-31431, achieving local privilege escalation via AF_ALG splice page cache corruption. No libc or…

binary-exploitationexploitationexploit-frameworks+3

4 months ago

mimikatz

gentilkiwi/mimikatz

A little tool to play with Windows security

authenticationexploitationexploit-frameworks+10

21.8k4 months ago

phpggc

ambionics/phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

exploitationexploit-frameworkspayload-generation+1

3.9k11 months ago

ioctlance

zeze-zeze/ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers

binary-analysisdynamic-analysis-sandboxingexploit-frameworks+4

4722 months ago

HatSploit

entysec/hatsploit

Modular penetration testing platform that enables you to write, test, and execute exploit code.

exploitationexploit-frameworkspayload-development+4

3285 months ago

zer0dump

bb00/zer0dump

Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.

exploitationexploit-frameworkspenetration-testing+1

1793 years ago

ROP_ROCKET

bw3ll/rop_rocket

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack,…

binary-exploitationexploitationexploit-frameworks+4

1739 months ago

Windows_MSKSSRV_LPE_CVE-2023-36802

chompie1337/windows_mskssrv_lpe_cve-2023-36802

Local privilege escalation exploit for CVE-2023-36802 targeting Windows kernel streaming service (MSKSSRV) on Windows 11 22H2, using I/O Ring…

binary-exploitationexploitationexploit-frameworks+3

1652 years ago

chromium-exploit-dev

petitoto/chromium-exploit-dev

Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits

binary-exploitationcommand-and-controlexploitation+5

3085 months ago

CVE-2016-6366

risksense-ops/cve-2016-6366

Public repository for improvements to the EXTRABACON exploit

binary-analysisexploitationexploit-frameworks+8

1639 years ago

CVE-2023-0179-PoC

turtlearm/cve-2023-0179-poc

Exploit for CVE-2023-0179, a stack buffer overflow in the Linux nftables subsystem, enabling unprivileged local privilege escalation to root via…

binary-exploitationexploitationexploit-frameworks+2

2152 years ago

CVE-2026-31431-Advanced-Exploit

sndav/cve-2026-31431-advanced-exploit

Exploit for CVE-2026-31431, a Linux kernel AF_ALG AEAD page-cache write vulnerability enabling unprivileged arbitrary 4-byte writes to readable files…

binary-exploitationexploitationexploit-frameworks+3

1114 months ago

Previous12…44 Next