Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
793 results
free-interactive-ai-training-materials preview

free-interactive-ai-training-materials

GitHubanthonydavidson189/free-interactive-ai-training-materials

Curated collection of free, interactive AI-powered training materials for security awareness education, with community contributions and practical…

curated-resourceseducationlabs-practice+1
94 months ago
XPRTestSuite preview

XPRTestSuite

GitHubffri/xprtestsuite

A collection of scripts and documents to help future XProtect Remediator (XPR) research

educationlabs-practicemalware-analysis+2
1211 months ago
ThreatHunting-JupyterNotebooks preview

ThreatHunting-JupyterNotebooks

GitHubbripwn/threathunting-jupyternotebooks

A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook…

curated-resourceseducationlabs-practice+2
206 months ago
Linux_hardening_and_security preview

Linux_hardening_and_security

GitHubnu11secur1ty/linux_hardening_and_security

Collection of Linux hardening scripts and security configurations for system auditing, access control, and defensive posture improvement. Includes…

configuration-auditingcurated-resourcesdefensive-tools+3
103 years ago
CVE-2021-2109 preview

CVE-2021-2109

GitHubrabbitsafe/cve-2021-2109

Step-by-step reproduction and analysis of CVE-2021-2109, a Weblogic Server remote code execution vulnerability via JNDI injection, with POC and…

educationexploitationlabs-practice+3
95 years ago
text4shell-poc preview

text4shell-poc

GitHubsecurekomodo/text4shell-poc

Proof of Concept Appliction for testing CVE-2022-42889

educationexploitationlabs-practice+3
83 years ago
CVE-2018-14667_Lab_POC preview

CVE-2018-14667_Lab_POC

GitHubr4ch1d0/cve-2018-14667_lab_poc

Demonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server

educationexploitationlabs-practice+2
7 days ago
CVE-2026-54992-PoC preview

CVE-2026-54992-PoC

GitHubdavidcarliez/cve-2026-54992-poc

Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow

binary-exploitationeducationexploitation+3
61 month ago
CVE-2021-38297 preview

CVE-2021-38297

GitHubgkrishnan724/cve-2021-38297

A Proof of concept scenario for exploitation of CVE2021-38297 GO WASM buffer-overflow

binary-exploitationctfeducation+5
82 years ago
cve-2022-36804 preview

cve-2022-36804

GitHubwalnutsecurity/cve-2022-36804

A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability…

command-and-controlexploitationlabs-practice+3
83 years ago
silicon2022-capturetheflag preview

silicon2022-capturetheflag

GitHubpaill/silicon2022-capturetheflag

Collection of 41 capture-the-flag challenges deployed via Docker and Azure Kubernetes using the RootTheBox platform. Includes terminal-based puzzles…

ctfeducationlabs-practice
84 years ago
Embedded-Backdoor-Connection preview

Embedded-Backdoor-Connection

GitHubomarothmann/embedded-backdoor-connection

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…

command-and-controleducationexploitation+5
84 years ago
CVE-2025-1094-PoC-Postgre-SQLi preview

CVE-2025-1094-PoC-Postgre-SQLi

GitHubishwardeepp/cve-2025-1094-poc-postgre-sqli

Proof-of-concept emulation and analysis of CVE-2025-1094, a critical PostgreSQL SQL injection vulnerability. Includes Docker-based lab setup, exploit…

code-analysisdatabase-securityeducation+5
61 year ago
100-Days-of-YARA-2026 preview

100-Days-of-YARA-2026

GitHubrustynoob-619/100-days-of-yara-2026

The 100 Days of YARA Challenge to write YARA rules consistently

curated-resourceseducationlabs-practice+3
114 months ago
log4shell-poc-lab preview

log4shell-poc-lab

GitHubobscuritylabs/log4shell-poc-lab

A lab demonstration of the log4shell vulnerability: CVE-2021-44228

container-securityeducationexploitation+3
94 years ago
CVE-2026-20896 preview

CVE-2026-20896

GitHubxaoczenon/cve-2026-20896

this is a modified POC of rz1027 for CVE-2026-20896

authenticationeducationexploitation+3
61 month ago
NORM-EDR preview

NORM-EDR

GitHubamberchalia/norm-edr

Experimental kernel-mode EDR research project focused on explainable detection of suspicious in-memory execution patterns, producing human-readable…

binary-analysisdefensive-toolseducation+4
116 months ago
CVE-2019-10149 preview

CVE-2019-10149

GitHubdarsigovrustam/cve-2019-10149

Instructions for installing a vulnerable version of Exim and its expluatation

educationemail-securityexploitation+3
56 years ago
Previous1…121314…45Next