Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
471 results
CVE-2011-2523 preview

CVE-2011-2523

GitHubhklabcr/cve-2011-2523

Manual and automated exploitation walkthrough for vsftpd 2.3.4 backdoor (CVE-2011-2523) with custom reverse shell payload and Metasploit integration…

ctfeducationexploitation+5
1 year ago
scanner-exploit-joomla-CVE-2015-8562 preview

scanner-exploit-joomla-CVE-2015-8562

GitHubthejackerz/scanner-exploit-joomla-cve-2015-8562

Automated scanner and exploit tool targeting Joomla CMS CVE-2015-8562 for remote code execution, designed for penetration testing and vulnerability…

exploitationinformation-gatheringpenetration-testing+2
10 years ago
CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow preview

CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow

GitHubpercussiveelbow/cve-2004-2271-minishare-1.4.1-buffer-overflow

Automated buffer overflow exploit for MiniShare 1.4.1 (CVE-2004-2271) with integrated msfvenom payload generation for penetration testing and…

exploitationpayload-generationpenetration-testing+2
8 years ago
commix preview

commix

GitHubcommixproject/commix

Automated Αll-in-One OS command injection exploitation tool.

exploitationpenetration-testingvulnerability-scanners+2
5.8k1 day ago
CVE-2022-0847-DirtyPipe-Exploits preview

CVE-2022-0847-DirtyPipe-Exploits

GitHubeduquintanilha/cve-2022-0847-dirtypipe-exploits

C exploit collection for Linux Dirty Pipe (CVE-2022-0847) local privilege escalation, including read-only file overwriting and SUID binary hijacking,…

binary-exploitationexploitationpenetration-testing+3
34 years ago
CVE-2022-0847-DirtyPipe-Exploits preview

CVE-2022-0847-DirtyPipe-Exploits

GitHuborsuprasad/cve-2022-0847-dirtypipe-exploits

C exploit collection for Linux Dirty Pipe (CVE-2022-0847) local privilege escalation, including read-only file overwrite and SUID binary hijacking,…

binary-exploitationexploitationpenetration-testing+3
4 years ago
harpyTools preview

harpyTools

GitHubjssngc/harpytools

Automated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…

command-and-controlexploitationlateral-movement+6
2013 days ago
phpBB-CVE-2026-48611 preview

phpBB-CVE-2026-48611

GitHubethicalgrey/phpbb-cve-2026-48611

Automated PoC for CVE-2026-48611 — phpBB OAuth login_link authentication bypass

authentication-authorizationexploitationinformation-gathering+5
15 days ago
w3af preview

w3af

GitHubandresriancho/w3af

Open-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…

exploitationpenetration-testingvulnerability-scanners+3
4.9k6 years ago
bloodyAD preview

bloodyAD

GitHubcravaterouge/bloodyad

LDAP-based Active Directory privilege escalation framework supporting pass-the-hash, pass-the-ticket, and certificate authentication for automated…

authenticationexploitationpenetration-testing+1
2.3k3h 49m ago
AutoLocalPrivilegeEscalation preview

AutoLocalPrivilegeEscalation

GitHubngalongc/autolocalprivilegeescalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

exploitationpenetration-testingprivilege-escalation+1
49610 years ago
fragattacks preview

fragattacks

GitHubvanhoefm/fragattacks

Automated vulnerability tester for Wi-Fi clients and access points, detecting FragAttacks fragmentation/aggregation flaws through frame injection,…

exploitationnetwork-securitypenetration-testing+3
1.3k1 year ago
POC-CVE-2025-24813 preview

POC-CVE-2025-24813

GitHubabsholi7ly/poc-cve-2025-24813

his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in…

exploitationpayload-developmentpenetration-testing+3
1981 year ago
jwtXploiter preview

jwtXploiter

GitHubdontpanico/jwtxploiter

Automated JWT security testing tool that exploits known CVEs, tampers with payloads, performs JKU/X5U injection, key confusion attacks, and verifies…

ctfexploitationpenetration-testing+2
2905 years ago
firebaseExploiter preview

firebaseExploiter

GitHubsecurebinary/firebaseexploiter

CLI tool to scan for and exploit insecure Firebase databases, supporting mass vulnerability scanning, custom JSON payload injection, and URI path…

database-securityexploitationpenetration-testing+2
1783 years ago
CVE-2021-3560-Polkit-Privilege-Esclation preview

CVE-2021-3560-Polkit-Privilege-Esclation

GitHubsecnigma/cve-2021-3560-polkit-privilege-esclation

Automated Bash PoC for CVE-2021-3560 polkit privilege escalation. Exploits dbus timing attack to inject a sudo user and gain root shell on vulnerable…

authenticationexploitationpenetration-testing+2
1263 years ago
DLLHSC preview

DLLHSC

GitHubctxis/dllhsc

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

binary-analysisexploitationpayload-development+1
1586 years ago
CVE-2024-32640-SQLI-MuraCMS preview

CVE-2024-32640-SQLI-MuraCMS

GitHubstuub/cve-2024-32640-sqli-muracms

CVE-2024-32640 | Automated SQLi Exploitation PoC

exploitationpenetration-testingvulnerability-analysis+1
792 years ago
Previous1…345…27Next