Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
31 results
NoFrak preview

NoFrak

GitHubgeorgiev-martin/nofrak

Proof Of Concept for Android. NoFrak is designed to prevent fracking attacks, as described in "Breaking and Fixing Origin-Based Access Control in…

android-securitydefensive-toolsmobile-security+2
10
12 years ago
CVE-2025-66024 preview

CVE-2025-66024

GitHublukasz-rybak/cve-2025-66024

Proof-of-concept for CVE-2025-66024: Stored XSS in XWiki Blog Application via unescaped post title in HTML title tag. Includes reproduction steps,…

educationpapers-researchvulnerability-analysis+2
4 months ago
iCSeeU preview

iCSeeU

GitHublr-m/icseeu

This is a suite of tools/PoCs/exploits for cameras using the iCSee application. And yes - it can run NES games!

binary-exploitationctfdebuggers+9
21 year ago
CVE-2025-55182-test preview

CVE-2025-55182-test

GitHuby3b3l4y3/cve-2025-55182-test

Proof-of-concept demonstrating React2shell vulnerability (CVE-2025-66478) in a Next.js application, providing a base for reproduction and…

educationexploitationpapers-research+2
14 months ago
Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847 preview

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

GitHubsimoesctt/chrono-drip-temporal-viscosity-exploitation-framework-cve-2022-0847

This tool demonstrates the application of fundamental physics discoveries to cybersecurity.

binary-exploitationeducationexploitation+8
6 months ago
CVE-2025-50944 preview

CVE-2025-50944

GitHubshinycolumn/cve-2025-50944

Improper Certificate Chain Validation in EagleEyes Lite Android Application

android-securitycryptographyeducation+3
11 months ago
CVE-2026-34038 preview

CVE-2026-34038

GitHubthemehackers/cve-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify

code-analysiseducationexploitation+3
11 month ago
CVE-2022-40317 preview

CVE-2022-40317

GitHubizdiwho/cve-2022-40317

Stored XSS proof-of-concept for OpenKM notes section, demonstrating a javascript: bypass of sanitization rules, with CVSS 3.1 scoring and…

educationpapers-researchpenetration-testing+2
23 years ago
CVE-2026-26903-PoC preview

CVE-2026-26903-PoC

GitHubjohn-jung/cve-2026-26903-poc

A PoC for demonstrating CVE-2026-26903

educationexploitationpapers-research+2
4 months ago
CVE-2025-52399-SQLi-Institute-of-Current-Students preview

CVE-2025-52399-SQLi-Institute-of-Current-Students

GitHubuserr404/cve-2025-52399-sqli-institute-of-current-students

Proof-of-concept exploit for CVE-2025-52399, demonstrating SQL injection in the loginlinkfaculty endpoint of Institute-of-Current-Students, enabling…

educationexploitationpapers-research+3
11 year ago
CVE-2023-2859 preview

CVE-2023-2859

GitHubmnqazi/cve-2023-2859

CVE-2023-2859 Medium Blog

educationexploitationpapers-research+2
3 years ago
CVE-2021-43141 preview

CVE-2021-43141

GitHubjeromeyoung/cve-2021-43141

Information about CVE-2021-43141, a reflected XSS in the plan_application section.

educationpapers-researchvulnerability-analysis+2
4 years ago
CVE-2019-6447-in-Mobile-Application preview

CVE-2019-6447-in-Mobile-Application

GitHubkavidk/cve-2019-6447-in-mobile-application

Research report detailing CVE-2019-6447 exploitation in real-world mobile applications, including practical examples and a demonstration video.

educationexploitationmobile-security+2
3 years ago
Previous12Next