Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
40 results
PrivacyTrace preview

PrivacyTrace

GitHubai45lab/privacytrace

How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces

ai-securitydata-exfiltrationinformation-gathering+3
1
19h 20m ago
php-cve-2026-10961x-lab-poc preview

php-cve-2026-10961x-lab-poc

GitHubdinosn/php-cve-2026-10961x-lab-poc

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

binary-exploitationexploitationfuzzing+7
1133 days ago
btr preview

btr

GitHubvusec/btr

Artifacts for the Branch Target Reuse (BTR) Spectre-v2 attack research, including microarchitecture experiments, attack-surface analysis of JIT…

binary-exploitationexploitationhardware-security+2
85 days ago
samsung_tizen_tv_root preview

samsung_tizen_tv_root

GitHubcommit-regrets/samsung_tizen_tv_root

Research toolkit that roots a Samsung Tizen 9 TV via a Chromium WasmGC RCE and V4L2 physmap arbitrary physical memory access, with persistent on-boot…

binary-exploitationembedded-systems-securityexploitation+8
156 days ago
wake-and-break preview

wake-and-break

GitHubblasty/wake-and-break

PSP exploit for AMD navi31 (RX 7900) GPUs that disables firmware signature checks so the card loads unsigned SMU, SDMA, MEC, IMU and RLC firmware;…

embedded-systems-securityexploitationfirmware-analysis+5
257 days ago
php2shell-bypass-aslr-exp preview

php2shell-bypass-aslr-exp

GitHub9bie/php2shell-bypass-aslr-exp

Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call…

binary-exploitationexploitationmemory-forensics+4
1.5k10 days ago
GhostFaceMPC preview

GhostFaceMPC

GitHubcrypto-unict/ghostfacempc

Reference implementation of privacy-preserving face recognition using replicated secret sharing in MP-SPDZ, with quantized GhostFaceNet inference,…

cryptographyeducationmachine-learning+2
118 days ago
security-research preview

security-research

GitHubzhangutah/security-research

Proof-of-concept C code and writeups for disclosed Linux kernel vulnerabilities, including per-CVE exploit sources and technical analysis.

binary-exploitationexploitationpapers-research+2
820 days ago
ricerca-tesi preview

ricerca-tesi

GitHubmikecostanzi/ricerca-tesi

risorse di ricerca per cve-2026-7228

curated-resourcesexploitationinformation-gathering+2
25 days ago
advisories preview

advisories

GitHublinnemanlabs/advisories

Curated Linux security advisories with CVE write-ups and reproducible proof-of-concept exploits covering local privilege escalation and authorization…

curated-resourcesexploitationpapers-research+1
11 month ago
DiagSpill preview

DiagSpill

GitHubmanizada/diagspill

Local privilege escalation PoC for CVE-2026-74469, exploiting an SCTP diagnostic-reply kernel memory corruption to gain root on Linux x86-64 systems.

binary-exploitationexploitationpapers-research+2
61 month ago
PPPoEject preview

PPPoEject

GitHubmanizada/pppoeject

Linux kernel local privilege escalation PoC for CVE-2026-68121, chaining PPPoE, FUSE, and IP6GRE to corrupt kernel memory and gain root.

binary-exploitationexploitationmemory-forensics+4
71 month ago
cve-2026-52910-poc preview

cve-2026-52910-poc

GitHubyolkfull/cve-2026-52910-poc

Race reproducer and stress toolkit for CVE-2026-52910, a Linux kernel use-after-free in reuseport cBPF selector programs, with dmesg and leak checks.

binary-exploitationdefensive-toolsexploitation+3
11 month ago
CVE-2016-5195 preview

CVE-2016-5195

GitHubvudangducminh/cve-2016-5195

Proof-of-concept exploit for CVE-2016-5195 (Dirty COW), a Linux kernel race condition enabling local privilege escalation to root.

binary-exploitationexploitationpapers-research+2
1 month ago
CVE-2026-76578 preview

CVE-2026-76578

GitHubbrainbob/cve-2026-76578

Proof-of-concept exploit for CVE-2026-76578 and CVE-2026-76560, chaining anonymous LDAP ADD with a 389-ds SELFDN bypass to gain FreeIPA domain admin…

authenticationexploitationidentity-management+5
1 month ago
linux-entra-sso-PoC preview

linux-entra-sso-PoC

GitHubsqueeze440/linux-entra-sso-poc

PoC — origin validation error enabling Entra ID PRT SSO cookie exfiltration in linux-entra-sso (GHSA-g9vc-5j77-f2cm, CVE-2026-87005, CVSS 5.3).

authenticationexploitationinformation-gathering+5
2 months ago
CVE-2026-74936-gc-potato preview

CVE-2026-74936-gc-potato

GitHubsneakynachos/cve-2026-74936-gc-potato

Reproduction of a WebAssembly use-after-free vulnerability in Mozilla's JavaScript engine, demonstrating a deterministic race condition and providing…

binary-analysisexploitationpapers-research+1
2 months ago
cve-2024-13176-timing-analysis preview

cve-2024-13176-timing-analysis

GitHubhaomin-yu/cve-2024-13176-timing-analysis

Instrumented analysis and reproducibility materials for ECDSA timing leakage in OpenSSL CVE-2024-13176

cryptographycurated-resourceseducation+2
2 months ago
Previous123Next