Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

46 results

TheLastBundleMismatch

michalbednarski/thelastbundlemismatch

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

android-securitybinary-analysisexploitation+2

102

2 years ago

CVE-2023-38831

mishra0230/cve-2023-38831

CVE-2023-38831 - WinRAR

binary-exploitationeducationexploitation+8

9 months ago

LockBit-Ransomware-Analysis

vignesh-hp/lockbit-ransomware-analysis

Threat intelligence and incident response case study on LockBit ransomware exploiting CVE-2023-4966 (Citrix Bleed).

data-exfiltrationdigital-forensicseducation+8

8 months ago

NSEC3-Encloser-Attack

goethe-universitat-cybersecurity/nsec3-encloser-attack

This project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868.

dns-analysisdns-fuzzingeducation+3

62 years ago

CVE-2023-52356-libtiff-analysis

yardenbenita/cve-2023-52356-libtiff-analysis

Root-cause analysis and patch validation of CVE-2023-52356 in libtiff using AddressSanitizer and GDB.

binary-analysisdebuggerseducation+2

1 month ago

claude_opus_cve_2023_0266

seanheelan/claude_opus_cve_2023_0266

Demo showing Claude Opus does not find CVE-2023-0266

ai-securitycode-analysiseducation+3

172 years ago

py_trustwallet_wasm

ohexa/py_trustwallet_wasm

(CVE-2023-31290) Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the…

cryptographyeducationexploitation+2

2 years ago

CVE-2023-36884-MS-Office-HTML-RCE

jakabakos/cve-2023-36884-ms-office-html-rce

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

educationexploitationpapers-research+3

412 years ago

CVE-2023-31703

sahiloj/cve-2023-31703

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Edit User functionality of the Microworld Technologies eScan Management Console…

educationpapers-researchpenetration-testing+3

48 months ago

CVE-2023-33732

sahiloj/cve-2023-33732

CVE-2023-33732 is a Reflected Cross-Site Scripting (XSS) vulnerability discovered in the Microworld Technologies eScan Management Console, version…

educationpapers-researchpenetration-testing+3

18 months ago

CVE-2023-1430

karlemilnikka/cve-2023-1430

Responsible disclosure of unpatched vulnerability in FluentCRM by WPManageNinja

authentication-authorizationeducationmisconfiguration+3

2 years ago

CVE-2023-3079

mistymntncop/cve-2023-3079

Proof-of-concept exploit for CVE-2023-3079, a Chrome V8 type confusion vulnerability, with curated writeups and root cause analysis resources.

binary-exploitationeducationexploitation+3

1311 year ago

CVE-2023-22527

thompson005/cve-2023-22527

Comprehensive documentation and defensive resources for CVE-2023-22527, a critical SSTI remote code execution vulnerability in Atlassian Confluence.…

curated-resourceseducationexploitation+3

1 year ago

CVE-2023-43646

200101whoami/cve-2023-43646

redos

code-analysiseducationpapers-research+2

2 years ago

copy-fail-CVE-2026-31431

silverruler/copy-fail-cve-2026-31431

copy-fail-CVE-2026-31431

binary-exploitationeducationexploitation+2

5 months ago

CVE-2023-34836

sahiloj/cve-2023-34836

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Microworld Technologies eScan Management Console v14.0.1400.2281. The vulnerable…

educationpapers-researchpenetration-testing+2

18 months ago

CVE-2023-46604-Analysis

sangrok-jeon/cve-2023-46604-analysis

Apache ActiveMQ OpenWire 역직렬화 RCE 취약점 기술 분석

binary-exploitationeducationexploitation+3

7 months ago

jfrog-CVE-2023-25136-OpenSSH_Double-Free

jfrog/jfrog-cve-2023-25136-openssh_double-free

Proof-of-concept exploit triggering a double-free vulnerability (CVE-2023-25136) in OpenSSH 9.1p1, causing a denial-of-service crash via pre-auth…

binary-exploitationeducationexploitation+3

413 years ago

Previous12 3 Next