Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

106 results

CVE-2021-21220

jacobtaylor3/cve-2021-21220

Browser-based CVE-2021-21220 exploit delivering a reverse shell via shellcode and a C2 implant for remote command execution on Windows targets.

command-and-controlexploitationlateral-movement+5

7 months ago

CVE-2017-3078

homjxi0e/cve-2017-3078

Proof-of-concept exploit for CVE-2017-3078, a memory corruption vulnerability in Adobe Flash Player ATF module enabling arbitrary code execution on…

binary-exploitationexploitationinformation-gathering+2

9 years ago

CVE-2024-34582

silent6trinity/cve-2024-34582

Proof-of-concept for reflected XSS (CVE-2024-34582) in Sunhillo Rici5k/Sureline web servers via the userid_change parameter in /cgi/usrPasswd.cgi.

exploitationpenetration-testingvulnerability-analysis+2

2 years ago

DahuaLoginBypass

bp2008/dahualoginbypass

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

authentication-authorizationexploitationiot-security+3

1904 months ago

NetSec-CVE-2023-4357

shihongsu/netsec-cve-2023-4357

Reproduces CVE-2023-4357 in Google Chrome to demonstrate XML/XSLT-based file access bypass, with analysis and proof-of-concept for educational…

educationexploitationlabs-practice+2

2 months ago

CVE-2023-4357-Exploitation

lon5948/cve-2023-4357-exploitation

Reproduction environment for CVE-2023-4357 Chrome XXE vulnerability with SVG-based file access bypass exploit and step-by-step setup instructions.

educationexploitationlabs-practice+2

42 years ago

CVE-2026-2441-PoC

d3b0j33t/cve-2026-2441-poc

Proof-of-concept for CVE-2026-2441, a Chrome CSS use-after-free leading to sandboxed renderer RCE. Includes three trigger methods, heap grooming, and…

educationexploitationpapers-research+2

8 months ago

CVE-2023-4357-Chrome-XXE

xcanwin/cve-2023-4357-chrome-xxe

[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

ctfcurated-resourceseducation+3

2301 year ago

Chrome-Forensic_CVE-2024-0044

jacktekno/chrome-forensic_cve-2024-0044

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

android-securitydata-recoverydigital-forensics+6

9 months ago

CVE-2023-6702

kaist-hacking/cve-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)

binary-exploitationctfeducation+3

862 years ago

Archived

widevine-l3-decryptor

tomer8007/widevine-l3-decryptor

A Chrome extension that demonstrates bypassing Widevine L3 DRM

binary-analysiseducationencryption-decryption-tools+3

1.2k3 years ago

CVE-2023-4427

tianstcht/cve-2023-4427

Exploit for CVE-2023-4427 targeting Chrome 117 V8, using many cross-origin iframes to brute-force ASLR and achieve code execution. Provides…

binary-exploitationctfeducation+3

282 years ago

ZeroCrumb

internetangel/zerocrumb

Dumping App Bound Protected Credentials & Cookies Without Privileges.

command-and-controldata-exfiltrationexploitation+6

1691 year ago

CVE-2026-6307

0xsha/cve-2026-6307

Google Chrome CVE-2026-6307 PoC

binary-exploitationeducationexploitation+6

534 months ago

CVE-2025-10585-The-Chrome-V8-Zero-Day

adityabhatt3010/cve-2025-10585-the-chrome-v8-zero-day

Google patched CVE-2025-10585, a Chrome V8 zero-day under active exploitation — here’s what it is, why it matters, and how to stay safe.

educationexploitationpapers-research+3

131 year ago

CVE-2025-2783

bytereaper77/cve-2025-2783

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google…

binary-exploitationeducationexploitation+1

81 year ago

Chrome-App-Bound-Encryption-Decryption

xaitax/chrome-app-bound-encryption-decryption

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

cryptographydata-exfiltrationencryption-decryption-tools+5

1.7k8 months ago

CVE-2026-85048-the-gpu-died

sneakynachos/cve-2026-85048-the-gpu-died

Reproducer and technical analysis for CVE-2026-85048, a Chrome viz surface use-after-free in the GPU process, with ASAN unit tests and browser…

binary-exploitationdebuggersexploitation+4

11 month ago

Previous 1 2 345 6 Next