Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2773 results

cve-2026-31431

vasyapokemon/cve-2026-31431

Research and detection toolkit for Linux kernel LPE CVE-2026-31431, including exploit analysis, YARA rules, auditd/Falco detection, patching guide,…

curated-resourcesdigital-forensicseducation+8

6 months ago

Penetration-Testing-Assessment-23-04-2026

admin2099/penetration-testing-assessment-23-04-2026

Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…

educationexploitationexploit-frameworks+9

4 months ago

CVE-2022-0185-Analysis-and-Exploit

sandesh9978/cve-2022-0185-analysis-and-exploit

Research and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability.

binary-exploitationeducationexploitation+4

7 months ago

CVE-2026-74469

0xblackash/cve-2026-74469

Research repository for CVE-2026-74469 (DiagSpill), a Linux kernel SCTP peer transport counter overflow causing an out-of-bounds write, with PoC,…

binary-exploitationeducationexploitation+5

1 month ago

tcp2kaslr

offline-ant/tcp2kaslr

CVE-2026-98432: a plain IPv4 TCP server is vulnerable, MPTCP is not the trigger. Bug trigger, evidence and analysis.

exploitationfuzzinglabs-practice+3

25 days ago

ZygoteExploitDemo

gitamans/zygoteexploitdemo

Educational demonstration of CVE-2024-31317 Zygote Injection Vulnerability on Android

android-securitybinary-exploitationeducation+7

28 months ago

CVE-2022-0492

chenaotian/cve-2022-0492

Detailed technical analysis and working exploit for CVE-2022-0492 Linux kernel container escape via cgroup release_agent, with step-by-step lab setup…

container-escapeeducationexploitation+3

324 years ago

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

teodor1231241/demo-proof-of-concept-temporal-memory-inconsistency-in-cldflt.sys-cve-2025-62221

Proof-of-concept demonstrating a use-after-free in cldflt.sys (CVE-2025-62221) that enables local privilege escalation to SYSTEM via kernel pool…

binary-exploitationeducationexploitation+3

29 months ago

CVE-2017-5638

dungsocool/cve-2017-5638

Hands-on lab demonstrating Apache Struts2 OGNL injection (CVE-2017-5638) with step-by-step system analysis, exploitation, sandbox bypass, and…

educationexploitationlabs-practice+3

5 months ago

SUDO-privilege-escalation

laxmiyamkolu/sudo-privilege-escalation

Educational simulation of CVE-2023-22809 Sudo privilege escalation vulnerability with automated Bash exploit script, lab manual, and mitigation…

educationexploitationlabs-practice+3

2 years ago

CVE-2019-10149

darsigovrustam/cve-2019-10149

Instructions for installing a vulnerable version of Exim and its expluatation

educationemail-securityexploitation+3

57 years ago

Dirty-Frag-CVE-2026-43284

kuniyal08/dirty-frag-cve-2026-43284

A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access

educationexploitationforensics+5

12 months ago

cve-testing

kuankuanqaq/cve-testing

Reproduce CVE-2022-32250 and CVE-2025-21756 by tampering with modprobe_path and hijacking control flow, respectively.

binary-exploitationeducationexploitation+2

1 year ago

CVE-2012-2982

cpyre/cve-2012-2982

Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)

educationexploitationlabs-practice+3

2 years ago

cve-2026-98432

alvaroguzmancode/cve-2026-98432

Rust detector and local lab for CVE-2026-98432, a Linux IPv4 TCP use-after-free in inet_opt/ireq_opt: static ELF analysis, kprobe reachability…

exploitationfuzzinglabs-practice+3

5 days ago

CVE-2019-10149

hyim0810/cve-2019-10149

CVE-2019-10149

command-and-controleducationexploitation+3

3 years ago

CVE-2026-43284-dirtyfrag-detection

g0thamrabb1t/cve-2026-43284-dirtyfrag-detection

Lab validation report and detection artifacts for CVE-2026-43284 (DirtyFrag) Linux LPE. Provides auditd telemetry, event correlation rules, and…

binary-exploitationeducationforensics+7

4 months ago

CVE-2026-98432

al4n4n/cve-2026-98432

PoC, non-destructive version scanner, KASAN crash verifier, and Suricata/Sigma detection rules for the Linux kernel TCP/IPv4 IP-options…

exploitationintrusion-detectionlabs-practice+3

2 days ago

Previous 1…567…100 Next