Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
238 results
cve-images preview

cve-images

GitHubedgecases-purplehax/cve-images

Intentionally-vulnerable nginx 1.30.0 CVE lab images (CVE-2026-40701/42934/42945/42946) for isolated security research. Lab use only.

container-securityctfcurated-resources+5
1
2 months ago
CVE-2025-1974 preview

CVE-2025-1974

GitHubboianeduard/cve-2025-1974

ingress-nginx admission controller RCE escalation PoC

cloud-securitycontainer-securityeducation+8
7 months ago
BIND-9-Cache-Poisoning-PoC---CVE-2025-40778 preview

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

GitHubsirbuvladste/bind-9-cache-poisoning-poc---cve-2025-40778

Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records.

dns-analysiseducationexploitation+3
7 months ago
CVE-1999-0678 preview

CVE-1999-0678

GitHublto7777777/cve-1999-0678

CVE-1999-0678- /doc directory browsable

configuration-auditingeducationintrusion-detection+4
8 months ago
Android-Security-Teryaagh preview

Android-Security-Teryaagh

GitHubralireza/android-security-teryaagh

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

android-securityctfcurated-resources+6
8222 months ago
heartbleed-lab preview

heartbleed-lab

GitHubvictoriacfigueiredo/heartbleed-lab

Educational laboratory for studying CVE-2014-0160 (Heartbleed) and framing inconsistencies in TLS heartbeat handling.

binary-exploitationcryptographyeducation+3
2 months ago
CVE-2025-63353 preview

CVE-2025-63353

GitHubzvckster/cve-2025-63353

Multi-language PoC (Python · Go · JS · C) and technical documentation for CVE-2025-63353, a critical predictable-default-PSK vulnerability in…

cryptographycurated-resourceseducation+8
2 months ago
azure-vulnerability-remediation-project preview

azure-vulnerability-remediation-project

GitHubdawnsmithcyber/azure-vulnerability-remediation-project

End-to-end vulnerability management lifecycle on Azure Windows Server 2025. Features OS patching and network-level compensating controls (NSG) to…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6
14 months ago
Vulnerability-Assessment-Exploitation-Lab preview

Vulnerability-Assessment-Exploitation-Lab

GitHubmirza-22144/vulnerability-assessment-exploitation-lab

Full-lifecycle penetration test of a legacy Linux environment (Metasploitable 2) emulated on Apple Silicon. Demonstrating network reconnaissance, RCE…

cryptographyeducationexploitation+9
7 months ago
LOAD preview

LOAD

GitHub0xballpoint/load

Lord Of Active Directory - automatic vulnerable active directory on AWS

cloud-infrastructure-securityeducationlabs-practice+3
1562 years ago
Cybersecurity-Projects preview

Cybersecurity-Projects

GitHubcarterperez-dev/cybersecurity-projects

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified…

cryptographycurated-resourceseducation+5
5.5k1 day ago
CVE-2024-4309-Analysis preview

CVE-2024-4309-Analysis

GitHubwinslowe/cve-2024-4309-analysis

BGT-Pentest-LAB Final Project: Xiaomi HyperOS System Updater OTA Signature Verification Bypass (CVE-2024-4309) Deep Analysis.

binary-exploitationcryptographyeducation+6
11 month ago
SLAE preview

SLAE

GitHubkkirsche/slae

SecurityTube Linux Assembly Expert x86 Exam

binary-exploitationcryptographyeducation+5
17 years ago
CVE-2025-5548 preview

CVE-2025-5548

GitHubpopclom/cve-2025-5548
binary-exploitationdebuggerseducation+8
5 months ago
Androl4b preview

Androl4b

GitHubsh4hin/androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

android-securityeducationlabs-practice+4
1.2k6 years ago
web-traffic-generator preview

web-traffic-generator

GitHubreconinfosec/web-traffic-generator

A quick and dirty HTTP/S "organic" traffic generator.

defensive-toolseducationgeneral-purpose-utilities+2
5136 years ago
OpenClaw_Termux preview

OpenClaw_Termux

GitHubandroidmalware/openclaw_termux

How to Install OpenClaw on an Android Phone and Control It via WhatsApp

android-securityeducationinformation-gathering+4
3226 months ago
MSMQ-Vulnerability preview

MSMQ-Vulnerability

GitHubleongxudong/msmq-vulnerability

Documentation and PoC for CVE-2023-21554 MSMQ Vulnerability

defensive-toolseducationintrusion-detection+3
51 month ago
Previous1…11121314Next