Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
174 results
Static-Malware-Analysis-Follina-CVE-2022-30190 preview

Static-Malware-Analysis-Follina-CVE-2022-30190

GitHubimvihanga03/static-malware-analysis-follina-cve-2022-30190

Static Malware Analysis of Follina (CVE-2022-30190) from Blue Team Labs Online

digital-forensicseducationexploitation+4
1
4 months ago
day08-CISCO-fmc-sim preview

day08-CISCO-fmc-sim

GitHubamalpvatayam67/day08-cisco-fmc-sim

This is a minimal, educational simulation that demonstrates the _impact_ class of a management-plane parsing RCE (inspired by CVE-2025-20265). It…

binary-exploitationeducationexploitation+3
111 months ago
CVE-2014-3704 preview

CVE-2014-3704

GitHubjoaomorenorf/cve-2014-3704

This code is taken from "Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)" and was converted to Python 3 to suit the exercise in…

educationexploitationlabs-practice+2
11 year ago
CVE-2012-2982_Python preview

CVE-2012-2982_Python

GitHubgvmyz/cve-2012-2982_python

PoC Python script as an exercice from tryhackme.

educationexploitationlabs-practice+3
15 years ago
log4j-pcap-activity preview

log4j-pcap-activity

GitHubapipia/log4j-pcap-activity

A fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)

ctfeducationexploitation+3
14 years ago
CVE-2023-20198 preview

CVE-2023-20198

GitHubreligan/cve-2023-20198

A cybersecurity case study analysing CVE-2023-20198 in Cisco IOS XE, covering vulnerability exploitation, mitigation strategies, secure software…

educationexploitationlabs-practice+6
8 months ago
CVE-2019-9193-Home-Lab preview

CVE-2019-9193-Home-Lab

GitHubnetw0rk7/cve-2019-9193-home-lab

This lab simulates CVE-2019-9193 - PostgreSQL COPY FROM PROGRAM RCE

database-securityeducationexploitation+3
8 months ago
DocViewerExploitApp preview

DocViewerExploitApp

GitHubtinopreter/docviewerexploitapp

This is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…

android-securitybinary-exploitationdynamic-code-analysis+6
1 year ago
cve-lfi-lab preview

cve-lfi-lab

GitHubthecyberfairy/cve-lfi-lab

A hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…

ctfeducationincident-response+5
1 year ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubphineas09/cve-2021-44228

Log4Shell Proof-Of-Concept derived from https://github.com/kozmer/log4j-shell-poc

educationexploitationlabs-practice+3
4 years ago
CVE-2021-44228-PoC preview

CVE-2021-44228-PoC

GitHubj3kz/cve-2021-44228-poc

Self-contained lab environment that runs the exploit safely, all from docker compose

educationexploitationlabs-practice+3
4 years ago
CVE-2022-30190-Analysis-With-LetsDefends-Lab preview

CVE-2022-30190-Analysis-With-LetsDefends-Lab

GitHubabdibimantara/cve-2022-30190-analysis-with-letsdefends-lab

this is my simple article about CVE 2022-30190 (Follina) analysis. I use the lab from Letsdefend.

ctfeducationexploitation+3
4 years ago
CVE-2026-33017-FireFlow preview

CVE-2026-33017-FireFlow

GitHubl4st98/cve-2026-33017-fireflow

Proof-of-concept RCE for Langflow CVE-2026-33017 using a malicious custom component to execute OS commands via build_public_tmp and retrieve output…

ctfeducationexploitation+4
3 days ago
THM-Steel_Mountain-CVE-2014-6287 preview
Archived

THM-Steel_Mountain-CVE-2014-6287

GitHubwizardy0ga/thm-steel_mountain-cve-2014-6287

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

ctfeducationexploitation+7
4 years ago
poc-graphql preview
Archived

poc-graphql

GitHubrighettod/poc-graphql

Research on GraphQL from an AppSec point of view.

api-security-testingeducationlabs-practice+3
4183 years ago
metasploitable2-exploitation-metasploit preview

metasploitable2-exploitation-metasploit

GitHubethicalhackinglabs/metasploitable2-exploitation-metasploit

Full Metasploit exploitation walkthrough against Metasploitable2 — vsftpd backdoor, Samba CVE-2007-2447, UnrealIRCd backdoor, Netcat exfiltration,…

command-and-controldata-exfiltrationeducation+9
1 month ago
CVE-2021-44228-docker-example preview

CVE-2021-44228-docker-example

GitHubdicanio/cve-2021-44228-docker-example
data-exfiltrationeducationexploitation+3
14 years ago
HowToHunt preview

HowToHunt

GitHubkathanp19/howtohunt

Collection of methodology and test case for various web vulnerabilities.

curated-resourceseducationlabs-practice+4
7.2k1 year ago
Previous1234…10Next