Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

435 results

cve-2026-13934

artwiderobo/cve-2026-13934

Structured vulnerability research repo for a Chrome Dawn WebGPU CWE-20 flaw: root cause, patch diff, static verification, severity review, and…

code-analysiseducationexploitation+3

15 days ago

paranoid_crypto

google/paranoid_crypto

Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.

cryptographypapers-researchstatic-analysis+2

8031 year ago

CVE-2026-9645-ScadaBR-Analysis

0xmhany/cve-2026-9645-scadabr-analysis

Technical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.

educationpapers-researchscada-ics-security+1

11 days ago

vulnerability-write-ups

b1ack0wl/vulnerability-write-ups

This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.

exploitationpapers-researchvulnerability-analysis

1463 years ago

BlackHat-Europe-2022

ga1ois/blackhat-europe-2022

Select Bugs From Binary Where Pattern Like CVE-1337-Days

binary-analysiscode-analysisexploitation+4

503 years ago

proposal-symbol-proto

tc39/proposal-symbol-proto

TC39 proposal for mitigating prototype pollution

educationpapers-researchvulnerability-analysis+1

532 years ago

bitlocker-attacks

wack0/bitlocker-attacks

A list of public attacks on BitLocker

curated-resourcesencryption-decryption-toolsexploitation+4

4651 month ago

onelogon

rub-softsec/onelogon

Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).

authenticationexploitationnetwork-security+4

1201 month ago

log4shell

sanasimran1403-jpg/log4shell

Log4Shell (CVE-2021-44228) research report — technical breakdown, root cause analysis, and end-to-end lab-reproduced exploit chain with evidence…

educationexploitationpapers-research+1

18 days ago

security-research

popy21/security-research

Vulnerability research write-ups — CVE-2026-12478 (libsoup), Apple WebKit, Google VRP

curated-resourceseducationpapers-research+1

2 days ago

token-priv

hatriot/token-priv

Token Privilege Research

exploitationpapers-researchpost-exploitation+1

8908 years ago

disclosures

cylancevulnresearch/disclosures

curated-resourcespapers-researchthreat-intelligence+1

179 years ago

reports

cmaruti/reports

curated-resourcesnetwork-securitypapers-research+2

14 years ago

publications

elttam/publications

Offensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…

binary-exploitationcurated-resourcesexploitation+5

16623 days ago

advisories

0xdea/advisories

A collection of my public security advisories.

cloud-securitycurated-resourceseducation+5

279 months ago

Vulnerability-Disclosure-Policy

enablesecurity/vulnerability-disclosure-policy

How Enable Security handles security vulnerabilities

curated-resourceseducationincident-response+2

101 year ago

MAL-003

mbadanoiu/mal-003

MAL-003: Groovy Security Bypass and Stored XSS in Apache OfBiz

exploitationpapers-researchpenetration-testing+3

2 years ago

MAL-006

mbadanoiu/mal-006

MAL-006: XML External Entity in "Try It" in WSO2 ESB

exploitationpapers-researchvulnerability-analysis+2

2 years ago

Previous12…25 Next