Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
74 results
POC-CVE-2026-58048 preview

POC-CVE-2026-58048

GitHubimbas007/poc-cve-2026-58048

Security research project

database-securityexploitationlabs-practice+4
1
17 days ago
ludus-defender-lab preview

ludus-defender-lab

GitHubzephrfish/ludus-defender-lab

MDE/MDI Defender setup for Ludus

defensive-toolsidentity-access-managementlabs-practice+3
6222 days ago
CVE-2026-12940-Langflow-Unauth-RCE preview

CVE-2026-12940-Langflow-Unauth-RCE

GitHubbiitts/cve-2026-12940-langflow-unauth-rce

CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis…

educationexploitationlabs-practice+3
19 days ago
cve-2021-41773-lab preview

cve-2021-41773-lab

GitHubkunalkhandelwal-dev/cve-2021-41773-lab
educationlabs-practicevulnerability-analysis+2
22 days ago
JOP_ROCKET preview

JOP_ROCKET

GitHubbw3ll/jop_rocket

This framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution…

binary-exploitationeducationexploitation+4
1161 year ago
CVE-2026-0047-poc preview

CVE-2026-0047-poc

GitHubmobilehackinglab/cve-2026-0047-poc

CVE-2026-0047: Missing permission check in ActivityManagerService.dumpBitmapsProto() — steal UI bitmaps from every running app with zero permissions…

android-securitybinary-exploitationeducation+6
153 months ago
log4j2-vulnerable-spring-app preview

log4j2-vulnerable-spring-app

GitHubzzzz0317/log4j2-vulnerable-spring-app

CVE-2021-44228

educationexploitationlabs-practice+3
44 years ago
CVE-2026-47102-PoC preview

CVE-2026-47102-PoC

GitHublearner202649/cve-2026-47102-poc

The code for personally reproducing the corresponding vulnerability

code-analysiseducationexploitation+5
2 months ago
CVE-2015-1328 preview

CVE-2015-1328

GitHubfernandocassiodev/cve-2015-1328

Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…

binary-exploitationctfeducation+3
29 days ago
gha-lab-a5c1876997-1 preview

gha-lab-a5c1876997-1

GitHubghapvharmo/gha-lab-a5c1876997-1

GitHub Actions workflow sandbox (CVE-2026-48546 reproduction)

educationexploitationlabs-practice+1
29 days ago
WebGoat.NET preview

WebGoat.NET

GitHubowasp/webgoat.net

OWASP WebGoat.NET

code-analysiseducationlabs-practice+3
7311 years ago
CVE-2021-3156 preview

CVE-2021-3156

GitHubmbcrump/cve-2021-3156

Notes regarding CVE-2021-3156: Heap-Based Buffer Overflow in Sudo

binary-exploitationeducationexploitation+3
395 years ago
CVE-2021-38297-Go-wasm-Replication preview

CVE-2021-38297-Go-wasm-Replication

GitHubparas98/cve-2021-38297-go-wasm-replication
binary-exploitationctfeducation+6
2 years ago
CVE-2018-7600 preview

CVE-2018-7600

GitHubraytran54/cve-2018-7600
code-analysiseducationexploitation+3
2 years ago
Holistic-Deconstruction-of-CVE-2019-5736- preview

Holistic-Deconstruction-of-CVE-2019-5736-

GitHubsastraadiwiguna-purpleeliteteaming/holistic-deconstruction-of-cve-2019-5736-

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a…

container-escapeeducationexploitation+6
7 months ago
CVE-2026-47101-PoC preview

CVE-2026-47101-PoC

GitHublearner202649/cve-2026-47101-poc

The code for personally reproducing the corresponding vulnerability

api-security-testingauthentication-authorizationeducation+7
2 months ago
PoC---CVE-2023-26482-RCE-LAB-Nextcloud preview

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

GitHubisabbii/poc---cve-2023-26482-rce-lab-nextcloud
educationexploitationlabs-practice+5
6 months ago
Offensive-lab-2 preview

Offensive-lab-2

GitHubmafiosohack/offensive-lab-2

Penetration test walkthrough on a vulnerable Ubuntu VM. Exploited the ProFTPD 1.3.3c backdoor (CVE-2010-4221) to gain root access and capture the…

ctfeducationexploitation+8
8 months ago
Previous12345Next