Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

107 results

llm-security

greshake/llm-security

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…

adversarial-attackai-securitycommand-and-control+7

2.1k

1 year ago

TRACE

zju-llm-safety/trace

Agentic jailbreak framework for LLM-based agents using scheme-based task decomposition, multi-turn disguising strategies, and adaptive self-evolution…

adversarial-attackai-securityexploitation+5

296 days ago

http-terminator

portswigger/http-terminator

AI-assisted research pipeline that extracts HTTP desync techniques, generates malformed request test-cases, validates them via Burp, and confirms…

ai-securityexploitationfuzzing+8

1242 months ago

deleting-the-trace

usama1002/deleting-the-trace

Experiments for control-token chain-of-thought suppression and parser-leniency attacks on tool-using LLM agents

adversarial-attackai-securityexploitation+3

113 days ago

trustmebro

davidcarliez/trustmebro

Bypass llm guardrails by confusing it with fabricated tool output.

adversarial-attackai-securityexploitation+3

5081 month ago

LLM-Jailbreak-via-Chain-of-Logic-Injection-CVE-2026-3098

george0papasotiriou/llm-jailbreak-via-chain-of-logic-injection-cve-2026-3098

Multi-stage prompt injection technique that bypasses LLM safety alignment via identity reassignment, refusal suppression, and output coercion,…

adversarial-attackai-securityexploitation+1

37 months ago

CrystalPotato

ricardojoserf/crystalpotato

Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run…

adversarial-attackexploitationpenetration-testing+3

1261 month ago

DB_Audit_Research

mthamil107/db_audit_research

Self-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…

adversarial-attackdatabase-securitydefensive-tools+4

1 month ago

fastgpt-sandbox-audit

qianlijaingshan/fastgpt-sandbox-audit

FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

ai-securitycontainer-escapedynamic-analysis-sandboxing+4

11 month ago

CVE-2023-44487

imabee101/cve-2023-44487

PoC script for HTTP/2 Rapid Reset (CVE-2023-44487) that sends crafted HTTP/2 streams to trigger denial-of-service conditions on vulnerable servers,…

adversarial-attackexploitationweb-application-exploitation+1

562 years ago

CVE-2026-73292

camillegr/cve-2026-73292

Proof-of-concept exploit for CVE-2026-73292: CSRF attack on Semaphore UI password change endpoint, serving a malicious page that silently resets an…

adversarial-attackeducationexploitation+3

1 month ago

CVE-2026-44578

lxxexxbxx/cve-2026-44578

Proof-of-concept exploit for CVE-2026-44578 that reproduces the vulnerable condition, enabling security researchers to validate affected systems and…

adversarial-attackexploitationvulnerability-analysis

11 month ago

SkeletonKey

defineid/skeletonkey

CVE-2026-6765, Test only FormAutofill handlers exposed in Firefox

adversarial-attackdata-exfiltrationexploitation+3

1 month ago

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

hunt-benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

PoC demonstrating quadratic DoS in Elixir html_sanitize_ex via crafted HTML; includes timing benchmarks, remote exploitation curl, and verification…

adversarial-attackexploitationpayload-generation+3

1 month ago

POC-CopyEscape-CVE-2026-17106

686f6c61/poc-copyescape-cve-2026-17106

PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker +…

adversarial-attackcontainer-escapecontainer-security+5

11 month ago

CopyEscape-CVE-2026-17106

masasron/copyescape-cve-2026-17106

PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

adversarial-attackcontainer-escapecontainer-security+3

211 month ago

CVE-2026-5817

davidrxchester/cve-2026-5817

Docker Container-to-Host Remote Code Execution POC via vllm-metal trust_remote_code=True

adversarial-attackcontainer-escapeexploitation

4 months ago

CVE-2026-5843

davidrxchester/cve-2026-5843

Docker Container Escape POC via mlx-metal importlib

ai-securitycontainer-escapecontainer-security+4

4 months ago

Previous12 3 4 5 6 Next