Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

175 results

Check-vuln-CVE-2019-0708

sugib3o/check-vuln-cve-2019-0708

Check vuln CVE 2019-0708

exploitationnetwork-securitypenetration-testing+3

7 years ago

CVE-2023-20198

revoltsecurities/cve-2023-20198

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

exploitationnetwork-securitypenetration-testing+3

73 years ago

LibSSH-Authentication-Bypass

nikhil1232/libssh-authentication-bypass

LibSSH Authentication Bypass CVE-2018-10933

exploitationnetwork-securitypenetration-testing+2

67 years ago

cve-2026-19553-wrap-bio

abraxas/cve-2026-19553-wrap-bio

Proof-of-concept lab reproducing CVE-2026-19553, where CPython ssl.SSLContext.wrap_bio() silently skips TLS hostname verification when…

cryptographyeducationexploitation+4

5 days ago

cve-2026-105221-gist-tls

abraxas/cve-2026-105221-gist-tls

CVE-2026-105221 - gist RubyGem - High - MITM - GitHub OAuth token theft

cryptographyexploitationlabs-practice+4

5 days ago

ats-ipallow-method-case

abraxas/ats-ipallow-method-case

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - ip_allow method case

exploitationlabs-practicenetwork-security+4

5 days ago

vsftpd-ssl-data-any-ticket

abraxas/vsftpd-ssl-data-any-ticket

vsftpd 3.0.5 - High - Remote - Privilege leftover - FTPS data accepts any resumed ticket

cryptographyexploitationlabs-practice+5

5 days ago

enterprise-abac-gateway

kavryxdev-group/enterprise-abac-gateway

Zero-trust reverse proxy and ABAC authorization gateway in Go with embedded OPA policy evaluation and distributed token revocation.

authentication-authorizationcloud-securitydefensive-tools+3

13 days ago

pfsense-bsnmpd-conf

abraxas/pfsense-bsnmpd-conf

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - bsnmpd syslocation

configuration-auditingexploitationlabs-practice+5

19 days ago

opnsense-captive-lastseen-roam

abraxas/opnsense-captive-lastseen-roam

OPNsense 26.7.6 - High - Remote - Network-access bypass - captive lastseen roam

authentication-authorizationexploitationlabs-practice+4

5 days ago

nmap_draytek_rce

truerandom/nmap_draytek_rce

nmap script to detect CVE-2020-8515 on Draytek Devices

exploitationnetwork-securitypenetration-testing+2

36 years ago

CVE-2026-0257

tushargurav28/cve-2026-0257

Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish…

authenticationcryptographyexploitation+5

35 months ago

CVE-2026-24061

balgan/cve-2026-24061

inetutils-telnetd Authentication Bypass - working

authenticationexploitationnetwork-security+3

49 months ago

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

iwallplace/cve-2026-26898-xiaomi-ssrf-hostheaderinjection

Unauthenticated SSRF in Xiaomi Mi Router 4A Gigabit Edition (firmware 3.0.24) via Host Header Injection — CVE-2026-26898

exploitationnetwork-securitypenetration-testing+3

15 months ago

CVE-2026-33555

r3verii/cve-2026-33555

One zero-byte QUIC packet is enough to desynchronize HAProxy's backend connection pool and smuggle HTTP requests across unrelated users — even users…

exploitationnetwork-securitypapers-research+3

26 months ago

CVE-2026-24061

harygovind/cve-2026-24061

CVE-2026-24061-PoC

authenticationexploitationnetwork-security+3

3 months ago

CVE-2024-23113

puckiestyle/cve-2024-23113

Detects CVE-2024-23113 format string vulnerability in FortiGate FGFM service via SSL connection on port 541, sending crafted payloads to verify RCE…

exploitationnetwork-securitypenetration-testing+2

12 years ago

nmap-CVE-2023-35078-Exploit

emanueldosreis/nmap-cve-2023-35078-exploit

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

exploitationnetwork-securitypenetration-testing+3

13 years ago

Previous 1…8910 Next