Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

732 results

AutoPWN-Suite

gamehunterkaan/autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

exploitationinformation-gatheringnetwork-security+5

1.1k

2 months ago

Excalibur

dviros/excalibur

Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.

educationexploitationexploit-frameworks+9

1337 years ago

laf

ioactive/laf

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the…

cryptographyexploitationfuzzing+5

1894 years ago

Heptagram

heptagrams/heptagram

This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team.

curated-resourcesexploitationpenetration-testing+1

795 years ago

DSCourier_BOF

octoberfest7/dscourier_bof

BOF POC of the DSCourier project / invoking WinGet via COM

command-and-controlexploitationlateral-movement+5

905 months ago

OWN-Defender

nirvanaon/own-defender

Research project reverse-engineering Windows Security Center COM interfaces to trace AV registration through ATL, vtable, WSCAPI, and RPC, with…

binary-analysisdefensive-toolseducation+2

361 month ago

NebulaPulsar

iss4cf0ng/nebulapulsar

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

dynamic-code-analysiseducationencryption-decryption-tools+7

462 months ago

exploits

chacka0101/exploits

Exploits project Hacking Command Center

exploitationexploit-frameworkspenetration-testing+2

513 years ago

mas-crackmes

owasp/mas-crackmes

The MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges part of the OWASP MAS project.

android-securitybinary-analysisctf+6

373 years ago

CVE-2025-24203-iOS-Exploit-With-Error-Logging

geosn0w/cve-2025-24203-ios-exploit-with-error-logging

Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero

binary-exploitationexploitationexploit-frameworks+4

4111 months ago

Android-Imgui-Template

traitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityeducationexploitation+4

221 month ago

php-bypass-disable-functions

irsl/php-bypass-disable-functions

Demo project how to bypass the disable_functions security control of PHP on Linux

binary-exploitationexploitationpost-exploitation+3

277 years ago

Demo-Exploit-Jackson-RCE

javanxd/demo-exploit-jackson-rce

Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.

educationexploitationlabs-practice+2

187 years ago

pdfjs-vuln-demo

snyk-labs/pdfjs-vuln-demo

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in…

educationexploitationlabs-practice+2

101 month ago

cve-2020-0796-scanner

dickens88/cve-2020-0796-scanner

This project is used for scanning cve-2020-0796 SMB vulnerability

exploitationinformation-gatheringnetwork-security+2

146 years ago

CVE-2025-54110-Kernel-EoP-PoC

canomer/cve-2025-54110-kernel-eop-poc

Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject`…

binary-exploitationeducationexploitation+3

114 months ago

GitLabSniper

ynsmroztas/gitlabsniper

Single-file Python scanner and exploit for CVE-2026-85706, an unauthenticated arbitrary file read in self-managed GitLab CE/EE, with project…

data-exfiltrationexploitationinformation-gathering+6

716 days ago

CVE-2020-13925

bit4woo/cve-2020-13925

Proof-of-concept exploit for CVE-2020-13925, a command injection vulnerability in Apache Kylin's diagnostic API, allowing remote code execution via…

educationexploitationlabs-practice+3

166 years ago

Previous 1…678…41 Next