Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

397 results

RTCore64-probe

crowthearchfiend/rtcore64-probe

A tiny cpp program to test reading memory using a vulnerable RTCore64.sys driver/device (CVE-2019-16098). It tries to read a "secret" from its own…

binary-analysisexploitationhardware-security+2

5 months ago

CVE-2009-4049

fengjixuchui/cve-2009-4049

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of…

binary-exploitationexploitationmemory-forensics+2

14 years ago

google-poc

0xxa/google-poc

This repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference / Array over-indexing vulnerability that I found in Google's…

binary-analysisexploitationfirmware-analysis+3

9 months ago

CVE-2021-23017-POC

z3usx01/cve-2021-23017-poc

The issue only affects nginx if the "resolver" directive is used in the configuration file. Further, the attack is only possible if an attacker is…

dns-analysisexploitationmemory-forensics+2

11 year ago

Chrome-Skia-CVE-2024-8193

hyhy100/chrome-skia-cve-2024-8193

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

binary-exploitationexploitationmemory-forensics+2

1 year ago

Chrome-Skia-CVE-2024-7966

hyhy100/chrome-skia-cve-2024-7966

PoC for a Chrome SKSL bypass + integer overflow -> OOB write vulnerability I reported to Google in Skia.

binary-exploitationexploitationmemory-forensics+2

1 year ago

Chrome-Skia-CVE-2024-8636

hyhy100/chrome-skia-cve-2024-8636

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

binary-exploitationexploitationmemory-forensics+2

1 year ago

Chrome-Skia-CVE-2024-8198

hyhy100/chrome-skia-cve-2024-8198

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

binary-exploitationexploitationmemory-forensics+2

1 year ago

CVE-2019-19012

tarantula-team/cve-2019-19012

An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read

binary-analysisexploitationfuzzing+3

6 years ago

Archived

CVE-2021-32537

0vercl0k/cve-2021-32537

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.

binary-exploitationexploitationmemory-forensics+1

555 years ago

flare-vm

mandiant/flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

binary-analysisdebuggersdigital-forensics+9

8.9k1 month ago

seer

epasveer/seer

Seer - a gui frontend to gdb

binary-analysisdebuggersdynamic-analysis-sandboxing+3

3.4k3 days ago

QCSuper

p1sec/qcsuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

embedded-systems-securitymemory-forensicsmobile-forensics+4

1.6k28 days ago

aes-finder

mmozeiko/aes-finder

Utility to find AES keys in running processes

binary-analysiscryptographyencryption-decryption-tools+2

1.1k9 years ago

PowerShellArsenal

mattifestation/powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

binary-analysisdebuggersdynamic-analysis-sandboxing+6

8995 years ago

BLUESPAWN

ion28/bluespawn

An Active Defense and EDR software to empower Blue Teams

configuration-auditingdefensive-toolsincident-response+3

1.3k4 months ago

ShellGhost

lem0nsec/shellghost

A memory-based evasion technique which makes shellcode invisible from process start to end.

binary-analysisencryption-decryption-toolsexploitation+4

1.2k2 years ago

fridump

nightbringer21/fridump

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

digital-forensicsforensicsinformation-gathering+3

8587 years ago

Previous 1…345…23 Next