Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
SMB_CVE-2025-24071 preview

SMB_CVE-2025-24071

GitHubex-cal1bur/smb_cve-2025-24071

Exploited CVE-2025-24071 via SMB by hosting a .library-ms file inside a .tar archive. Using tar x from smbclient, the payload is extracted…

exploitationpassword-attackspayload-generation+3
4
1 year ago
iblessing preview

iblessing

GitHubsoulghost/iblessing

iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can…

binary-analysisdynamic-analysis-sandboxingexploitation+5
6864 years ago
CVE-2023-4549 preview

CVE-2023-4549

GitHubb0marek/cve-2023-4549

Repository for CVE-2023-4549 vulnerability.

exploitationpenetration-testingphishing-tools+3
2 years ago
kernelpop preview

kernelpop

GitHubspencerdodd/kernelpop

kernel privilege escalation enumeration and exploitation framework

exploitationpenetration-testingprivilege-escalation+1
7028 years ago
PegasusX preview

PegasusX

GitHubjndok/pegasusx

OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656

binary-exploitationeducationexploitation+3
1039 years ago
CVE-2014-1266-poc preview

CVE-2014-1266-poc

GitHubgabrielg/cve-2014-1266-poc

Proof-of-concept exploit for Apple SSL/TLS verification vulnerability (CVE-2014-1266) in iOS and OS X, demonstrating HTTPS interception via a proxy…

exploitationios-securitymobile-security+3
7812 years ago
check_icmp_dos preview

check_icmp_dos

GitHubpa55w0rd/check_icmp_dos

iOS 12 / OS X Remote Kernel Heap Overflow (CVE-2018-4407) POC

exploitationios-securitymobile-security+3
627 years ago
RootPipeTester preview

RootPipeTester

GitHubsideeffect42/rootpipetester

RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later

educationexploitationpenetration-testing+2
1811 years ago
flow_divert-heap-overflow preview

flow_divert-heap-overflow

GitHubbazad/flow_divert-heap-overflow

Proof-of-concept exploit for CVE-2016-1827 on OS X Yosemite.

binary-exploitationexploitationvulnerability-analysis
49 years ago
test_struts2_vulnerability_CVE-2017-5638 preview

test_struts2_vulnerability_CVE-2017-5638

GitHubsjitech/test_struts2_vulnerability_cve-2017-5638

test struts2 vulnerability CVE-2017-5638 in Mac OS X

educationexploitationlabs-practice+3
9 years ago
CVE-2024-0379 preview

CVE-2024-0379

GitHubkodaichodai/cve-2024-0379

a PoC for CVE-2024-0379/WP Plugin - Custom Twitter Feeds - A Tweets Widget or X Feed Widget (<= 2.2.1)

exploitationpayload-developmentpenetration-testing+2
1 year ago
powerview.py preview

powerview.py

GitHubaniqfakhrul/powerview.py

Powerview on steroids

dns-analysisexploitationinformation-gathering+7
9946 days ago
pacemaker preview

pacemaker

GitHublekensteyn/pacemaker

Heartbleed (CVE-2014-0160) client exploit

cryptographyexploitationnetwork-security+3
33110 years ago
SharpKiller preview

SharpKiller

GitHubs1lkys/sharpkiller

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

exploitationids-ips-evasionpayload-development+3
3502 years ago
SUIDGuard preview

SUIDGuard

GitHubsektioneins/suidguard

SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more

binary-exploitationdefensive-toolsexploitation+1
39110 years ago
rtx-cve-2023-45779 preview

rtx-cve-2023-45779

GitHubmetaredteam/rtx-cve-2023-45779

Proof-of-concept code for Android APEX key reuse vulnerability

android-securitybinary-analysisexploitation+3
1092 years ago
CVE-2021-42342 preview

CVE-2021-42342

GitHubmr-xn/cve-2021-42342

Proof-of-concept exploit for CVE-2021-42342, a remote code execution vulnerability in GoAhead web server, demonstrating LD_PRELOAD injection via CGI…

exploitationpayload-developmentpenetration-testing+2
414 years ago
CVE-2019-15858 preview

CVE-2019-15858

GitHubgeneraleg/cve-2019-15858

Unauthenticated RCE at Woody Ad Snippets / CVE-2019-15858 (PoC)

exploitationpayload-developmentpenetration-testing+2
326 years ago
Previous12345Next