Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
23347 results
CVE-2024-47066 preview

CVE-2024-47066

GitHubeqstlab/cve-2024-47066

Lobe Chat Server-Side Request Forgery exploit

educationexploitationvulnerability-analysis+2
2 years ago
PTM preview

PTM

GitHubgmh5225/ptm

C++ library for manipulating x86-64 paging tables from user mode: read/write PML4E, PDPTE, PDE and PTE entries, translate virtual to physical…

binary-exploitationexploitationmemory-forensics+3
34 years ago
QuickPGTrigger preview

QuickPGTrigger

GitHubgmh5225/quickpgtrigger

The stress testing of your PG bypass [old school project]

exploitationpapers-researchprivilege-escalation+1
104 years ago
nxc-vulnscan preview

nxc-vulnscan

GitHubrvsh3ll/nxc-vulnscan

NetExec module: run every stock Windows vuln-check in one pass (check-only, no exploit)

defensive-toolsexploitationnetwork-security+5
15h 32m ago
fuzz preview

fuzz

GitHubxsscx/fuzz

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

curated-resourcesexploitationfuzzing+6
4155 days ago
netprobe-cve-2026-98432 preview

netprobe-cve-2026-98432

GitHubxen0bit/netprobe-cve-2026-98432

Black-box remote probe that detects CVE-2026-98432, a Linux IPv4 TCP ireq_opt use-after-free, via differential SYN-ACK option echo, plus static…

binary-analysisexploitationfuzzing+4
63 days ago
CVE-2026-112445 preview

CVE-2026-112445

GitHubmas0nshi/cve-2026-112445

Proof-of-concept for CVE-2026-112445, a macOS local privilege escalation where an unprivileged console user abuses the launchd com.apple.xpc.uscwoap…

exploitationpapers-researchprivilege-escalation+1
494 days ago
CVE-2026-88773 preview

CVE-2026-88773

GitHubscyrix-llc/cve-2026-88773

Technical analysis of a NetScaler nsppe HTTP/1.1 chunk-size integer-wrap request smuggling flaw, with disassembly, wire-level PoC flows, and firmware…

binary-analysisexploitationfirmware-analysis+5
11 month ago
arcgis-web-shell preview

arcgis-web-shell

GitHubryanpohlner/arcgis-web-shell

ArcGIS Enterprise geoprocessing service that publishes a Python toolbox for command execution.

exploitationpayload-developmentpenetration-testing+5
54 months ago
CVE-2026-71569 preview

CVE-2026-71569

GitHuboscerd/cve-2026-71569

Runnable Docker proof-of-concept for CVE-2026-71569, an SSRF guard bypass in Apache Camel camel-a2a webhook validation, with probes and fix…

educationexploitationvulnerability-analysis+1
4 days ago
CVE-2026-90885 preview

CVE-2026-90885

GitHuboscerd/cve-2026-90885

Runnable proof-of-concept reproducer for CVE-2026-90885, an XXE (CWE-611) in Apache Camel camel-saxon XQuery, with Spring Boot and Quarkus builds and…

defensive-toolseducationexploitation+2
4 days ago
CVE-2026-95628 preview

CVE-2026-95628

GitHuboscerd/cve-2026-95628

Runnable proof-of-concept reproducer for CVE-2026-95628, an absolute-path validation gap in Apache Camel camel-docling, with Spring Boot and Quarkus…

defensive-toolseducationexploitation+2
4 days ago
CVE-2026-95629 preview

CVE-2026-95629

GitHuboscerd/cve-2026-95629

Runnable proof-of-concept reproducer for CVE-2026-95629, a path-traversal flaw in Apache Camel camel-docling where the output-path header reaches…

code-analysisdefensive-toolseducation+4
4 days ago
CVE-2026-95664 preview

CVE-2026-95664

GitHuboscerd/cve-2026-95664

Runnable Spring Boot and Quarkus reproducer for CVE-2026-95664, demonstrating Simple expression injection via the CamelAwsS3Key header in…

defensive-toolseducationexploitation+2
4 days ago
plex2shell preview

plex2shell

GitHubgmh5225/plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

exploitationpayload-developmentpenetration-testing+5
16 days ago
preboot preview

preboot

GitHubgmh5225/preboot

Experimental research code for analyzing d_olex firmware and performing preboot-stage attacks against firmware boot code.

binary-exploitationembedded-systems-securityexploitation+2
11 year ago
MercilessAmd preview

MercilessAmd

GitHubmein-0/mercilessamd

Proof-of-concept exploiting AMD AmdTools64.sys MSR read/write IOCTLs to overwrite IA32_LSTAR, bypass SMEP and escalate from administrator to SYSTEM…

binary-exploitationexploitationprivilege-escalation+4
4 days ago
initial-access-community preview

initial-access-community

GitHubvulncheck-oss/initial-access-community

Go-based exploits for unauthenticated network vulnerabilities in routers, VPNs, appliances, and IoT, bundled with PCAPs, Suricata/Snort/YARA/Sigma…

curated-resourcesembedded-systems-securityexploitation+7
214 days ago
Previous12…100Next