Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

154 results

CVE-2026-10036-speechbrain-rce

saiteja-erukude/cve-2026-10036-speechbrain-rce

SpeechBrain < 1.1.1 checkpoint metadata RCE via unsafe PyYAML parsing of CKPT.yaml.

code-analysiseducationexploitation+2

10 days ago

qlcoder

neuralprogram/qlcoder

Agentic Framework for Synthesizing CodeQL Queries

ai-assisted-reversingcode-analysispapers-research+3

2510 days ago

CVE-2026-26198-analysis

sergicortesabadia/cve-2026-26198-analysis

Deep dive into a critical SQL injection in Python's Ormar ORM — reproduction, fix, and tests

code-analysiseducationpapers-research+2

5 months ago

CVE-2021-21193

mehrzad1994/cve-2021-21193

Educational presentation analyzing CVE-2021-21193, a use-after-free vulnerability in Google Chrome's Blink engine, including exploitation details and…

curated-resourceseducationpapers-research+2

4 years ago

codeql-sample-polkit

hohn/codeql-sample-polkit

All stages of exploring the polkit CVE-2021-4034 using codeql

code-analysiseducationpapers-research+2

24 years ago

docling-core-CVE-2026-24009

biranperetz/docling-core-cve-2026-24009

Technical write-up and PoC for CVE-2026-24009, demonstrating unsafe YAML loading in docling-core and practical mitigation paths.

code-analysiseducationexploitation+2

6 months ago

polytracker

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

binary-analysisdynamic-code-analysiseducation+4

5982 months ago

CVE-2026-76564

toanln-cov/cve-2026-76564

Stored XSS via User-Agent in Admin Order View in PhocaCart

code-analysisexploitationpapers-research+3

17 days ago

TrustworthyRAG

gpt-laboratory/trustworthyrag

An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems.

ai-securityanomaly-detectioncode-analysis+2

2 months ago

static-analysis

analysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

code-analysiscurated-resourcesdevsecops+5

14.8k9h 53m ago

PurpleLlama

meta-llama/purplellama

Set of tools to assess and improve LLM security.

adversarial-attackai-securitycode-analysis+4

4.4k21 days ago

awesome-mba

gmh5225/awesome-mba

List of mixed boolean-arithmetic resources

binary-analysiscode-analysiscurated-resources+3

41 year ago

awesome-llvm-security

gmh5225/awesome-llvm-security

Curated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…

binary-analysiscode-analysiscurated-resources+7

87824 days ago

cve-2026-13934

artwiderobo/cve-2026-13934

Structured vulnerability research repo for a Chrome Dawn WebGPU CWE-20 flaw: root cause, patch diff, static verification, severity review, and…

code-analysiseducationexploitation+3

1 month ago

CVE-2016-5195

gogooma125732/cve-2016-5195

Non-weaponized CVE-2016-5195 (Dirty COW) analysis and validation harness with root-cause research, upstream patch review, and safe lab-only PoC for…

code-analysiseducationexploitation+3

24 days ago

Blockchain-Security-Audit-List

0xnazgul/blockchain-security-audit-list

A list of Blockchain Security audit companies, solo auditors and location of public audits.

code-analysiscurated-resourceseducation+2

7911 year ago

BlackHat-Europe-2022

ga1ois/blackhat-europe-2022

Select Bugs From Binary Where Pattern Like CVE-1337-Days

binary-analysiscode-analysisexploitation+4

503 years ago

Web3Bugs

zhangzhuosjtu/web3bugs

Demystifying Exploitable Bugs in Smart Contracts

code-analysiscurated-resourceseducation+4

1.8k1 year ago

Previous12…9 Next