Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
196 results
t3code-release-checksum-same-origin preview

t3code-release-checksum-same-origin

GitHubabraxas/t3code-release-checksum-same-origin

T3 Code 61c3794c supply-chain leftover. Updater verifies SHA256SUMS from the same origin as the archive. No signature. Loopback lab.

code-analysisexploitationlabs-practice+4
1 day ago
CVE-2026-85884 preview

CVE-2026-85884

GitHubbeardhammer/cve-2026-85884

PowerShell proof-of-concept demonstrating CVE-2026-85884, a Windows whesvc/WinDiag Lua ETW privilege escalation from low-privileged or WPAD LPAC code…

exploitationpapers-researchprivilege-escalation+2
3722 days ago
tcp2kaslr preview

tcp2kaslr

GitHuboffline-ant/tcp2kaslr

CVE-2026-98432: a plain IPv4 TCP server is vulnerable, MPTCP is not the trigger. Bug trigger, evidence and analysis.

exploitationfuzzinglabs-practice+3
25 days ago
cve-2026-98432 preview

cve-2026-98432

GitHubalvaroguzmancode/cve-2026-98432

Rust detector and local lab for CVE-2026-98432, a Linux IPv4 TCP use-after-free in inet_opt/ireq_opt: static ELF analysis, kprobe reachability…

exploitationfuzzinglabs-practice+3
5 days ago
lpe-study-notes preview

lpe-study-notes

GitHubjadedfella/lpe-study-notes

A slow, from-zero walk through a Linux kernel privilege-escalation bug (CVE-2026-98260)

android-securitybinary-exploitationcurated-resources+6
111 days ago
POC-CVE-2026-94134 preview

POC-CVE-2026-94134

GitHubmosesox/poc-cve-2026-94134

Proof-of-concept code demonstrating exploitation of CVE-2026-94134, with accompanying vulnerability research notes from OX Security.

exploitationpapers-researchvulnerability-analysis+1
19 days ago
awesome-reverse-engineering preview

awesome-reverse-engineering

GitHubmorluto/awesome-reverse-engineering

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

binary-analysiscurated-resourcesdebuggers+8
1.6k6 days ago
gpu-instance-fingerprint preview

gpu-instance-fingerprint

GitHubdivagr18/gpu-instance-fingerprint

Fingerprint the exact GPU you're running on, even among identical GPUs, from the order its atomic adds land in. 99.1% accuracy, survives reboots,…

hardware-securitypapers-researchprivacy
275 days ago
qai2026-fgsm-transfer preview

qai2026-fgsm-transfer

GitHubxeeshanajmal/qai2026-fgsm-transfer

Code and results for the QAI 2026 paper on FGSM attack transferability from simulation to IBM quantum hardware.

adversarial-attackai-securityintrusion-detection+3
11 month ago
OLMo-Twin preview

OLMo-Twin

GitHubali-bana/olmo-twin

Reproduction code for a controlled study of membership-inference attacks on OLMo 2, covering document insertion, mid-training, post-training, scoring…

ai-securitydata-exfiltrationmachine-learning+2
6 days ago
PrivacyTrace preview

PrivacyTrace

GitHubai45lab/privacytrace

How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces

ai-securitydata-exfiltrationinformation-gathering+3
13 days ago
NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2- preview

NWH-Stealer-Analysis-Fileless-Bun-Runtime-Execution-Clipboard-Image-Theft-Cloud-C2-AWS-R2-

GitHubkaandemir993/nwh-stealer-analysis-fileless-bun-runtime-execution-clipboard-image-theft-cloud-c2-aws-r2-

Static analysis and payload extraction of NWH Stealer. Features deep dive into fileless execution via Bun JavaScript Runtime, in-memory clipboard…

binary-analysiscommand-and-controldata-exfiltration+7
6 days ago
lab preview

lab

GitHubchakshugupta13/lab

Code artifacts from research paper implementations

cryptographycurated-resourceseducation+2
8 days ago
honeypot-data preview

honeypot-data

GitHub0x4d31/honeypot-data

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

incident-responseinformation-gatheringioc-management+4
4410 days ago
rocq-cve-poc-22024 preview

rocq-cve-poc-22024

GitHubendrazine/rocq-cve-poc-22024

CVE-2026-72704 — Rocq Guard Checker Trusts Corrupted Recursive Tree After Transport

cryptographyexploitationpapers-research+1
10 days ago
SecLog preview

SecLog

GitHubseclog-open/seclog

Collects multi-source security logs from reproducible Docker attack scenarios, builds attack chains, and provides the SecLog-Bench-216 benchmark for…

anomaly-detectiondynamic-analysis-sandboxingeducation+6
213 days ago
ln-upgrade-dynamics preview

ln-upgrade-dynamics

GitHubbitcoindatalabs/ln-upgrade-dynamics

Code, aggregate data and LaTeX source for 'Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023-2026' (arXiv:2610.30350)

data-exfiltrationeducationnetwork-security+4
12 days ago
Vidar-Stealer-Chrome-Injection-Malicious-JS-Targeting-Google-Reddit-Sessions-Analysis preview

Vidar-Stealer-Chrome-Injection-Malicious-JS-Targeting-Google-Reddit-Sessions-Analysis

GitHubkaandemir993/vidar-stealer-chrome-injection-malicious-js-targeting-google-reddit-sessions-analysis

Reverse engineering Vidar Stealer: From obfuscated memory strings to Chrome process injection, malicious JS execution, and active session hijacking…

binary-analysisdigital-forensicsdynamic-analysis-sandboxing+6
511 days ago
Previous12…11Next