Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

687 results

kamene

phaethon/kamene

Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3…

information-gatheringnetwork-mappingnetwork-security+3

872

5 years ago

CVE-2025-10952-ml-logger-AFR

khashayarnzk/cve-2025-10952-ml-logger-afr

PoC for CVE-2025-10952 — ml-logger unauthenticated arbitrary file read. CVSS 5.3

exploitationinformation-gatheringpenetration-testing+2

2 days ago

CVE-2024-23897

machiavelliii/cve-2024-23897

Unauthenticated arbitrary file read exploit for Jenkins CVE-2024-23897, with HTTPS and CSRF-crumb support to bypass hardened instances.

exploitationinformation-gatheringpenetration-testing+2

2 days ago

htb-labs-connected

diegorivas1/htb-labs-connected

Hack The Box Connected machine write-up featuring enumeration, CVE-2025-57819 exploitation, reverse shell, and privilege escalation to root via…

ctfeducationexploitation+7

2 days ago

mssharepoint-scanner

virologi-info/mssharepoint-scanner

A scanner for CVE-2026-55040 and CVE-2026-63520, designed to determine whether the server is affected by these two CVEs.

defensive-toolsinformation-gatheringnetwork-security+3

2 days ago

cPanelSniper

zwanski2019/cpanelsniper

CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection

authentication-authorizationcommand-and-controlexploitation+6

3 months ago

CVE-2026-26336-PoC

ceaarab/cve-2026-26336-poc

Proof-of-concept exploit for CVE-2026-26336, an unauthenticated path traversal in Alfresco Share allowing arbitrary file read within the webapp and…

exploitationinformation-gatheringpenetration-testing+2

3 months ago

portscan-CVE-2026-41940

amirrezamarzban/portscan-cve-2026-41940

IP CIDRs (presumably as input, maybe command line or file) and checks ports 2083 and 2087 for openness

information-gatheringnetwork-securitypenetration-testing+3

14 months ago

CVE-2021-43798-mass_scanner

rodpwn/cve-2021-43798-mass_scanner

Mass scanner for Grafana CVE-2021-43798 unauthorized file read, supporting single targets, hostname lists, and IP ranges with PoC verification.

exploitationinformation-gatheringreconnaissance+2

54 years ago

CVE-2026-29909-MRCMS-vulnerability

qflksheep/cve-2026-29909-mrcms-vulnerability

Unauthenticated directory enumeration PoC for MRCMS V3.1.2, exploiting missing authentication in /admin/file/list.do to disclose server directory…

exploitationinformation-gatheringpenetration-testing+2

5 months ago

CVE-2021-42013

mauricelambert/cve-2021-42013

Detects and exploits Apache CVE-2021-42013 for remote code execution and local file disclosure via Nmap, Python, and Ruby scripts.

exploitationinformation-gatheringpenetration-testing+3

14 years ago

CVE-2021-41773

mauricelambert/cve-2021-41773

Multi-language exploit and detection scripts for CVE-2021-41773, enabling remote code execution and local file disclosure on vulnerable Apache…

exploitationinformation-gatheringpenetration-testing+3

14 years ago

CVE-2021-21311

llhala/cve-2021-21311

Proof-of-concept for CVE-2021-21311, a server-side request forgery in Adminer before 4.7.9, demonstrating SSRF exploitation in PHP database…

exploitationinformation-gatheringpenetration-testing+2

84 years ago

CVE-2021-43798

lalkaltest/cve-2021-43798

Proof-of-concept exploit for Grafana arbitrary file reading vulnerability (CVE-2021-43798) affecting versions 8.0.0 to 8.3.0, demonstrating…

exploitationinformation-gatheringpenetration-testing+2

4 years ago

CVE-2024-55457-PoC

h13nh04ng/cve-2024-55457-poc

Proof-of-concept exploit for CVE-2024-55457, a directory traversal in MasterSAM Star Gate v11 allowing unauthenticated arbitrary file download via…

exploitationinformation-gatheringpenetration-testing+2

1 year ago

CVE-2024-23897-Jenkins-4.441

classic130/cve-2024-23897-jenkins-4.441

Exploit for Jenkins arbitrary file leak (CVE-2024-23897) that reads files from the target server via a crafted request.

exploitationinformation-gatheringpenetration-testing+2

2 years ago

CVE-2021-43798_exploit

aymenbouferroum/cve-2021-43798_exploit

Exploit for Grafana directory traversal (CVE-2021-43798) allowing local file read via crafted plugin path. Includes usage instructions and references.

exploitationinformation-gatheringpenetration-testing+2

14 years ago

CVE-2025-11371

netvanguard-cmd/cve-2025-11371

Proof-of-concept exploit for CVE-2025-11371, an unauthenticated Local File Inclusion in Gladinet CentreStack and TrioFox, enabling remote file…

educationexploitationinformation-gathering+3

110 months ago

Previous12…39 Next