Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

15 results

DetectPacket-CVE-2017-8464

trg-1999/detectpacket-cve-2017-8464

Exploit vulnerabilities and vulnerability prevention implementation

educationexploitationforensics+6

4 years ago

CVE-2026-77812

wh02m1/cve-2026-77812

Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

bluetooth-securityexploitationhardware-iot-security+4

41 month ago

Urgent11-Suricata-LUA-scripts

sud0woodo/urgent11-suricata-lua-scripts

Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260

exploitationids-ips-evasionintrusion-detection+3

196 years ago

cve-2018-4407

unixpickle/cve-2018-4407

Crash macOS and iOS devices with one packet

exploitationios-securitynetwork-security+2

467 years ago

Archived

teamcity-CVE-2026-63077-pcap

boredhackerblog/teamcity-cve-2026-63077-pcap

teamcity teamcity-CVE-2026-63077 exploitation pcap

exploitationintrusion-detectionnetwork-security+2

2 months ago

shellshock

themson/shellshock

scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271

exploitationnetwork-securitypacket-sniffing-analysis+2

112 years ago

CVE-2010-4669

wrong-commit/cve-2010-4669

Python-based exploit for CVE-2010-4669 using Scapy to send crafted packets for network vulnerability testing. Requires root and Python 2.

exploitationnetwork-securitypacket-sniffing-analysis+1

2 years ago

php2shell-detect

corelight/php2shell-detect

Zeek and Suricata Detections for "php2shell" CVE-2026-109618 and CVE-2026-109619

defensive-toolsincident-responseintrusion-detection+4

168 days ago

CVE-2026-110912

0xblackash/cve-2026-110912

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

defensive-toolseducationexploitation+5

221 days ago

csumguard

mchorfa/csumguard

Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999

configuration-auditingcontainer-securitydefensive-tools+7

319 days ago

cve-2026-98432-defender-toolkit

garphengate/cve-2026-98432-defender-toolkit

Exposure audits, hunt queries and a validated interim mitigation for CVE-2026-98432, the use-after-free in the Linux IPv4 TCP handshake. Read-only…

configuration-auditingdefensive-toolsincident-response+4

2 days ago

synipopt

raahilmw/synipopt

IPv4 SYN with IP options, one lab target per run, for CVE-2026-98432 research. Header-offset parser, regression tests, and a postmortem of a broken…

defensive-toolsexploitationfuzzing+4

5 days ago

cve-2026-98432-check

marcelofmatos/cve-2026-98432-check

Verifica se um host descarta SYN TCP IPv4 com IP options (mitigação do CVE-2026-98432)

configuration-auditingdefensive-toolsmisconfiguration+5

2 days ago

tester-linux-cve-2026-98432

luxagen/tester-linux-cve-2026-98432

Vulnerability/mitigation tester for Linux-kernel CVE-2026-98432

defensive-toolsnetwork-securitypacket-sniffing-analysis+3

2 days ago

omnicheck_CVE-2026-98432

omniversetr/omnicheck_cve-2026-98432

Non-destructive checker for CVE-2026-98432 (Linux kernel TCP use-after-free): patch status, exposed listeners and mitigation verification. By…

configuration-auditingdefensive-toolsnetwork-mapping+5

12 days ago