Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1307 results

heretic

p-e-w/heretic

Fully automatic censorship removal for language models

adversarial-attackai-securityeducation+3

28.3k10 days ago

IPI-exposure-signal

jianshuod/ipi-exposure-signal

Research pipeline for detecting latent indirect prompt-injection exposure signals in agentic LLMs via hidden-state probing, including trace…

ai-securityeducationmachine-learning+1

423 days ago

break-golf

trailofbits/break-golf

Cryptanalysis golf: break schemes and prove it in Lean 4. Proof-of-concept board.

cryptographyctfeducation+2

3 days ago

polytracker

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

binary-analysisdynamic-code-analysiseducation+4

5982 months ago

Johnny-You-Are-Fired

rub-nds/johnny-you-are-fired

Artifacts for the USENIX publication.

cryptographyemail-securitypapers-research+3

566 years ago

CVE-2021-43811

s-index/cve-2021-43811

awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811

code-analysiseducationexploitation+3

24 years ago

TheLastBundleMismatch

michalbednarski/thelastbundlemismatch

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

android-securitybinary-analysisexploitation+2

1012 years ago

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

murataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmap

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)

educationinformation-gatheringnetwork-mapping+3

26 years ago

Royal_APT

nccgroup/royal_apt

Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research

command-and-controlcurated-resourcesintrusion-detection+3

528 years ago

CVE-2025-45407

yallasec/cve-2025-45407

CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407…

educationpapers-researchvulnerability-analysis+2

1 year ago

knob

francozappa/knob

Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]

bluetooth-securitycryptographyexploitation+3

1864 years ago

CVE-2025-43300

ticofookfook/cve-2025-43300

Detailed technical analysis of CVE-2025-43300, a buffer overflow vulnerability in DNG file processing enabling remote code execution. Explains the…

binary-exploitationeducationexploitation+2

311 months ago

ResourcePoison

michalbednarski/resourcepoison

Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…

android-securityexploitationmobile-security+3

10610 months ago

SecOPD

pppyb/secopd

Research implementation for mitigating adaptive prompt injections via on-policy distillation, with training recipes and evaluators for SEP, PISmith,…

adversarial-attackai-securityeducation+2

23 days ago

LeakGauge

yeasen-z/leakgauge

Detects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.

adversarial-attackai-securityanomaly-detection+2

9 days ago

CVE-2025-0924-different

skrkcb2/cve-2025-0924-different

Technical analysis of CVE-2025-0924, a Stored XSS vulnerability in WP Activity Log plugin for WordPress. Includes root cause analysis, exploitation…

educationexploitationpapers-research+2

1 year ago

CVE-2025-7461

bx33661/cve-2025-7461

Detailed analysis of CVE-2025-7461, a SQL injection vulnerability in Modern Bag E-commerce System, including root cause, affected code, and…

educationpapers-researchvulnerability-analysis+1

41 year ago

DirtyPipe-CVE-2022-0847

vinukalana/dirtypipe-cve-2022-0847

This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847

binary-exploitationeducationexploitation+3

24 years ago

Previous12…73 Next