Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

59 results

LSTM-MI

bkcs-hust/lstm-mi

A LSTM based framework for handling multiclass imbalance in DGA botnet detection

dns-analysiseducationmachine-learning+3

226 years ago

CVEREV3

kmeps4/cverev3

Proof-of-concept testing environment for CVE-2021-30858, based on Google Project Zero's root cause analysis of an in-the-wild iOS exploit.

binary-exploitationeducationexploitation+2

15 years ago

fastjson-tp1fn1

scabench/fastjson-tp1fn1

a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used

code-analysiseducationpapers-research+3

2 years ago

PISmith

albert-y1n/pismith

PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses

adversarial-attackai-securitymachine-learning+3

221 month ago

Archived

kemon

didi/kemon

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

binary-analysisdefensive-toolseducation+6

3987 months ago

PIForge

albert-y1n/piforge

Open framework for RL-based prompt injection red teaming, with a shared trainer, curriculum learning, and benchmarks like AgentDojo, InjecAgent, and…

adversarial-attackai-securityeducation+5

381 month ago

MicroC-u-os2-vuln-code-extracted-from-

spiralbl0ck/microc-u-os2-vuln-code-extracted-from-

Buffer Overflow Attack and Prevention for an FPGA Based Soft-Processor System - 7th International Conference on Innovation in Electronics and…

binary-exploitationeducationembedded-systems-security+3

1 year ago

PacketPatch

xuyw-seu/packetpatch

Practical black-box adversarial packet generation against encrypted traffic classification with minimal overhead and full packet recoverability.

adversarial-attackai-securityeducation+6

74 months ago

CVE-2022-34913

halcy0nic/cve-2022-34913

Proof of concept for CVE-2022-34913

binary-exploitationeducationexploitation+3

13 years ago

Windows-Kernel-Exploitation

vp777/windows-kernel-exploitation

Techniques and tools for Windows kernel exploitation, covering pool overflow exploitation, segment heap metadata abuse, and debugging scripts for…

binary-exploitationeducationexploitation+3

2692 months ago

deep-loglizer

logpai/deep-loglizer

A deep learning toolkit for log-based anomaly detection

anomaly-detectioneducationlog-analysis+2

2705 years ago

CVE-2026-94128

lzty/cve-2026-94128

Proof-of-concept implementation for CVE-2026-94128, provided for study and research purposes.

educationexploitationpapers-research+2

71 month ago

CVE-2026-94129

lzty/cve-2026-94129

Proof-of-concept implementation for CVE-2026-94129, provided for study and research purposes.

educationexploitationpapers-research+1

41 month ago

CVE-2025-11391

r3db34rdh4x/cve-2025-11391

WordPress PPOM for WooCommerce Plugin <= 33.0.15 is vulnerable to SQL Injection

educationexploitationpapers-research+2

1 year ago

fuzzilli

googleprojectzero/fuzzilli

A JavaScript Engine Fuzzer

binary-analysiseducationfuzzing+2

2.3k3 days ago

CP-PLUS-EZ-P21-CVE-2026-65893-65894

cybervinner/cp-plus-ez-p21-cve-2026-65893-65894

Documents CP PLUS EZ-P21 IP camera CVEs: arbitrary code execution via debug feature and improper authentication of HTTP endpoints, with responsible…

authenticationeducationembedded-systems-security+5

3 months ago

CVE-2026-42536-PoC

erberkan/cve-2026-42536-poc

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content

exploitationpapers-researchvulnerability-analysis+2

61 month ago

SecAssessment-GapDetection-Thesis

thesisgroup3/secassessment_gapdetect

Rule-based CLI tool that grades organizational defenses against MITRE ATT&CK and D3FEND frameworks, detects security gaps, and proposes mitigations.…

configuration-auditingdevsecopseducation+3

14 months ago

Previous12 3 4 Next