Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

104 results

yaml-payload

seal-sec-demo-2/yaml-payload

SnakeYAML CVE-2022-1471 exploit payload for demo

dynamic-analysis-sandboxingeducationexploitation+3

8 months ago

captain4554.github.io

captain4554/captain4554.github.io

🔍 Scan for CVE-2025-55182 vulnerabilities with a hybrid tool that combines static and dynamic analysis for improved security assessments.

dynamic-analysis-sandboxingexploitationpenetration-testing+3

18 months ago

extract75-cve-2020-13995

dbrumley/extract75-cve-2020-13995

Control flow hijack exploit for CVE-2020-13995 with Docker-based deployment and Mayhem fuzzing integration for automated vulnerability testing.

binary-exploitationdynamic-analysis-sandboxingexploitation+2

3 years ago

x-stream__xstream_CVE-2020-26217_1-4-14-java77

shoucheng3/x-stream__xstream_cve-2020-26217_1-4-14-java77

Java library for XML serialization and deserialization, with a focus on the CVE-2020-26217 deserialization vulnerability exploit.

code-analysisdynamic-analysis-sandboxingexploitation+3

1 year ago

CVE-2026-39813

horkimhab/cve-2026-39813

CVE-2026-39813 - Fortinet Sandbox - Draft

dynamic-analysis-sandboxingeducationexploitation+3

4 months ago

NanoMQ-Memory-Leak-Research

moxie25/nanomq-memory-leak-research

Public advisory and technical analysis for CVE-2026-36590, a NanoMQ v0.24.9 denial-of-service vulnerability.

dynamic-analysis-sandboxingexploitationiot-security+4

3 months ago

CVE-2025-4427-CVE-2025-4428

rxerium/cve-2025-4427-cve-2025-4428

Detection for CVE-2025-4427 and CVE-2025-4428

code-analysisdynamic-analysis-sandboxingexploitation+3

1 year ago

Spring-Boot-Tomcat-CVE-2025-24813

n0n-zer0/spring-boot-tomcat-cve-2025-24813

POC for CVE-2025-24813 using Spring-Boot

dynamic-analysis-sandboxingexploitationpayload-development+3

1 year ago

jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646-v6ed3b5b01ff1

shoucheng3/jenkinsci__workflow-cps-plugin_cve-2022-25173_2646-v6ed3b5b01ff1

Exploit for CVE-2022-25173 targeting Jenkins Pipeline Groovy Plugin's CPS interpreter sandbox bypass, enabling arbitrary code execution within…

code-analysisdevsecopsdynamic-analysis-sandboxing+3

1 year ago

expat_CVE-2024-28757

renukaselvar/expat_cve-2024-28757

C library for stream-oriented XML parsing with handler registration, supporting UTF-8/UTF-16 encoding, and autoconf-based build system. Includes…

code-analysisdynamic-analysis-sandboxingexploitation+3

2 years ago

log4j-cve-2021-44228

lohanichaten/log4j-cve-2021-44228

Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) targeting Java applications via JNDI injection for remote code execution.

code-analysisdynamic-analysis-sandboxingexploitation+2

4 years ago

Text4shell--Automated-exploit---CVE-2022-42889

adarshpv9746/text4shell--automated-exploit---cve-2022-42889

Automated exploit for CVE-2022-42889 (Text4Shell) with a vulnerable Dockerized app for testing and manual exploitation guidance.

dynamic-analysis-sandboxingexploitationpayload-development+3

3 years ago

CVE-2024-1441

almkuznetsov/cve-2024-1441

Reproduces fuzzing and crash analysis for CVE-2024-1441 using AFL++ and CASR, with detailed setup and commands for libvirt.

binary-analysisdynamic-analysis-sandboxingexploitation+2

2 years ago

Archived

certfuzz

certcc/certfuzz

This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).

binary-analysisdynamic-analysis-sandboxingexploitation+3

2741 year ago

discord-crasher

aftermathlabs/discord-crasher

Some bugs found via binary instrumentation and fuzzing

binary-analysisdynamic-analysis-sandboxingexploitation+5

251 month ago

log4j-Scan-Burpsuite

snow0715/log4j-scan-burpsuite

Log4j漏洞（CVE-2021-44228）的Burpsuite检测插件

dynamic-analysis-sandboxingexploitationpenetration-testing+3

134 years ago

CVE-2025-61303

egkritsis/cve-2025-61303

Critical Vulnerability (9.8) - RecordedFuture Triage dynamic analysis engine can fail to record malicious behavior when samples produce very…

dynamic-analysis-sandboxingeducationexploitation+3

211 months ago

CVE-2025-55182-react2shell

aastikgakhar/cve-2025-55182-react2shell

Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.

dynamic-analysis-sandboxingexploitationpenetration-testing+3

10 months ago

Previous 1 234 5 6 Next