Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2385 results
CVE-2017-1000117 preview

CVE-2017-1000117

GitHubvulapps/cve-2017-1000117

Proof-of-concept exploit for CVE-2017-1000117, demonstrating command injection via git clone to write arbitrary output to a web directory.

educationexploitationlabs-practice+2
3
9 years ago
CVE-2026-34990 preview

CVE-2026-34990

GitHubhorkimhab/cve-2026-34990

CVE-2026-34990 - Draft or Todo

educationlabs-practicevulnerability-analysis
1 month ago
CVE-2026-34980 preview

CVE-2026-34980

GitHubhorkimhab/cve-2026-34980

CVE-2026-34980 - Draft or Todo

educationexploitationlabs-practice+2
1 month ago
CVE-2026-18577 preview

CVE-2026-18577

GitHubhorkimhab/cve-2026-18577

CVE-2026-18577 - Draft

educationexploitationlabs-practice+2
1 month ago
100-Days-of-YARA-2026 preview

100-Days-of-YARA-2026

GitHubrustynoob-619/100-days-of-yara-2026

The 100 Days of YARA Challenge to write YARA rules consistently

curated-resourceseducationlabs-practice+3
114 months ago
React2Shell preview

React2Shell

GitHubsho-luv/react2shell

CVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.

ctfeducationexploit-frameworks+7
108 months ago
log4shell-poc-lab preview

log4shell-poc-lab

GitHubobscuritylabs/log4shell-poc-lab

A lab demonstration of the log4shell vulnerability: CVE-2021-44228

container-securityeducationexploitation+3
94 years ago
nextjs-vulnerable-app preview

nextjs-vulnerable-app

GitHubstrobes-security/nextjs-vulnerable-app

CVE-2025-29927 lab

authenticationeducationlabs-practice+3
61 year ago
CVE-2022-29078 preview

CVE-2022-29078

GitHubmiko550/cve-2022-29078

vuln ejs 3.1.6 docker

educationexploitationlabs-practice+2
84 years ago
NORM-EDR preview

NORM-EDR

GitHubamberchalia/norm-edr

Experimental kernel-mode EDR research project focused on explainable detection of suspicious in-memory execution patterns, producing human-readable…

binary-analysisdefensive-toolseducation+4
116 months ago
CVE-2017-7525-Jackson-Deserialization-Lab preview

CVE-2017-7525-Jackson-Deserialization-Lab

GitHubingenuity-fainting-goats/cve-2017-7525-jackson-deserialization-lab

Insecure Java Deserialization Lab

binary-exploitationeducationexploitation+3
62 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubnoflowpls/cve-2021-41773

CVE-2021-41773

educationexploitationlabs-practice+3
63 years ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubguayoyocyber/cve-2022-22965

Vulnerabilidad RCE en Spring Framework vía Data Binding on JDK 9+ (CVE-2022-22965 aka "Spring4Shell")

educationexploitationlabs-practice+2
64 years ago
CVE-2026-44963 preview

CVE-2026-44963

GitHubsentinelxofficial/cve-2026-44963

Detection scripts, patch checker & hardening guide for CVE-2026-44963 (Veeam B&R RCE)

educationexploitationincident-response+4
42 months ago
CVE-2019-0708-Windows preview

CVE-2019-0708-Windows

GitHubeastmountyxz/cve-2019-0708-windows

这篇文章将分享Windows远程桌面服务漏洞(CVE-2019-0708),并详细讲解该漏洞及防御措施。作者作为网络安全的小白,分享一些自学基础教程给大家,主要是关于安全工具和实践操作的在线笔记,希望您们喜欢。同时,更希望您能与我一起操作和进步,后续将深入学习网络安全和系统安全知识并分享相关实验。总…

educationexploitationlabs-practice+3
56 years ago
CVE-2026-82286-gpt-crawler-Arbitrary-File-Write preview

CVE-2026-82286-gpt-crawler-Arbitrary-File-Write

GitHubbiitts/cve-2026-82286-gpt-crawler-arbitrary-file-write

CVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS…

educationexploitationlabs-practice+3
9 days ago
CVE-2026-23479-Redis-UAF-Proof-of-Concept preview

CVE-2026-23479-Redis-UAF-Proof-of-Concept

GitHubrizlmaulanaa/cve-2026-23479-redis-uaf-proof-of-concept

Proof of concept with GDB‑assisted exploitation (educational / lab use only)

binary-exploitationdatabase-securitydebuggers+4
1 month ago
CVE-2019-5475 preview

CVE-2019-5475

GitHubexp-docs/cve-2019-5475

CVE-2019-5475 靶场: RCE 命令注入漏洞

educationexploitationlabs-practice+3
53 years ago
Previous1…99100Next