Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

107 results

CVE-2019-0678

sandi-go/cve-2019-0678

Microsoft Edge Elevation of Privilege Vulnerability

educationexploitationpapers-research+2

7 years ago

CVE-2022-41401

ixsly/cve-2022-41401

exploitationinformation-gatheringpenetration-testing+2

13 years ago

jira-ssrf

pwn1sher/jira-ssrf

CVE-2017-9506

exploitationpenetration-testingvulnerability-analysis+1

6 years ago

CVE-2025-5777-Exploit

soltanali0/cve-2025-5777-exploit

educationexploitationinformation-gathering+3

41 year ago

cve-2025-29927

balajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

exploitationmisconfigurationvulnerability-analysis+2

1 year ago

log4j2burpscanner

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2

8413 years ago

CVE-2000-0649

rafaelh/cve-2000-0649

Test for CVE-2000-0649, and return an IP address if vulnerable

exploitationinformation-gatheringpenetration-testing+3

82 years ago

snmpvlan

ehabhussein/snmpvlan

CVE-2014-3341 exploit

configuration-auditingexploitationnetwork-security+2

411 years ago

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

4qu4r1um/tugtainer-1.30.2-cve-2026-55494-and-cve-2026-62308-to-rce

A combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer

container-escapecontainer-securityeducation+5

1 month ago

cve-2000-0649

stevenvegar/cve-2000-0649

Script fo testing CVE-2000-0649 for Apache and MS IIS servers

exploitationinformation-gatheringpenetration-testing+2

4 years ago

DahuaConsole

mcw0/dahuaconsole

Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.

authentication-authorizationembedded-systems-securityexploitation+5

3181 year ago

CVE-2019-17221

h4ckologic/cve-2019-17221

PhantomJS uses internal module: webpage, to open, close, render, and perform multiple actions on webpages, which suffers from an arbitrary file read…

exploitationinformation-gatheringreconnaissance+2

86 years ago

CVE-2024-28397-command-execution-poc

ghostoverflow/cve-2024-28397-command-execution-poc

This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access…

code-analysisexploitationpayload-development+2

51 year ago

CVE-2019-5513-scanner

sudosu01/cve-2019-5513-scanner

The VMWare Horizon Connection Server is often used as an internet-facing gateway to an organization’s virtual desktop environment (VDI). Until…

exploitationinformation-gatheringpenetration-testing+3

2 months ago

IronPE

iss4cf0ng/ironpe

Rust-based Windows PE manual loader that maps and executes x86/x64 executables from memory, demonstrating internal loader behavior and PE structure…

binary-analysisbinary-exploitationeducation+5

1245 months ago

CVE-2022-23779

rishi-kaul/cve-2022-23779

CVE-2022-23779 is a security vulnerability in Zoho ManageEngine Desktop Central ,Testing for CVE-2022-23779 using curl

exploitationinformation-gatheringpenetration-testing+3

7 months ago

CVE-2017-9506

labsbots/cve-2017-9506

Atlassian Jira XSS attack via Server Side Request Forgery (SSRF).

exploitationinformation-gatheringpenetration-testing+3

4 years ago

CVE-2025-29927

aydinnyunus/cve-2025-29927

CVE-2025-29927 Proof of Concept

authentication-authorizationeducationexploitation+3

1021 year ago

Previous 123 4 5 6 Next