Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

28 results

CVE-2023-33730

sahiloj/cve-2023-33730

eScan Management Console version 14.0.1400.2281 contains privilege escalation via `GetUserCurrentPwd` function lets attackers retrieve any user's…

authentication-authorizationeducationexploitation+8

6 months ago

CVE-2015-2291

gmh5225/cve-2015-2291

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a…

binary-exploitationeducationexploitation+3

54 years ago

CVE-2024-27198-EXPLOIT

k3ystr0k3r/cve-2024-27198-exploit

A PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass

authenticationeducationexploitation+4

82 years ago

CVE-2023-49438

brandon-t-elliott/cve-2023-49438

CVE-2023-49438 - Open Redirect Vulnerability in Flask-Security-Too

educationpapers-researchvulnerability-analysis+2

52 years ago

CVE-2025-67730

dharan10/cve-2025-67730

A public disclourse of CVE-2025-67730 in Frape lms By dharan ragunathan

educationpapers-researchvulnerability-analysis+2

8 months ago

CVE-2025-9776

snailsploit/cve-2025-9776

CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL Injection via CSV Import | POC + Walkthrough

educationexploitationpapers-research+3

4 months ago

CVE-2024-4367-Analysis

masamuneee/cve-2024-4367-analysis

Analysis and PoC for CVE-2024-4367: arbitrary JavaScript execution (XSS) in PDF.js

educationexploitationpapers-research+3

52 years ago

CVE-2025-12030

snailsploit/cve-2025-12030

ACF to REST API WordPress Plugin IDOR Vulnerability (CVE-2025-12030) - Security flaw allowing authenticated users with Contributor-level access to…

educationexploitationpapers-research+3

4 months ago

CVE-2026-34038

themehackers/cve-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify

code-analysiseducationexploitation+3

12 months ago

CVE-2025-51865

secsys-fdu/cve-2025-51865

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Ai2's playground chat, allowing attackers to brute-force predictable message…

educationinformation-gatheringpapers-research+3

21 year ago

CVE-2019-6447

vino-theva/cve-2019-6447

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to…

android-securityeducationexploitation+3

4 years ago

CVE-2025-63419

mmakingdom/cve-2025-63419

CrushFTP before 11.3.7_60 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the…

educationpapers-researchvulnerability-analysis+2

29 months ago

CVE-2026-33555

r3verii/cve-2026-33555

One zero-byte QUIC packet is enough to desynchronize HAProxy's backend connection pool and smuggle HTTP requests across unrelated users — even users…

exploitationnetwork-securitypapers-research+3

24 months ago

linux-4.19.72_CVE-2022-36946

satheesh575555/linux-4.19.72_cve-2022-36946

Linux kernel source tree modified to reproduce and analyze CVE-2022-36946, a kernel vulnerability, for educational and research purposes.

binary-exploitationeducationexploitation+2

13 years ago

linux-4.19.72_CVE-2023-35828

trinadh465/linux-4.19.72_cve-2023-35828

Linux kernel source tree modified to demonstrate CVE-2023-35828, providing a reference for vulnerability analysis and exploitation research.

binary-analysiseducationexploitation+2

3 years ago

linux-4.19.72_CVE-2022-42896

satheesh575555/linux-4.19.72_cve-2022-42896

Linux kernel source tree modified to address CVE-2022-42896, providing a reference for vulnerability analysis and exploitation research.

binary-exploitationeducationexploitation+2

3 years ago

linux-4.19.72_CVE-2022-42896

trinadh465/linux-4.19.72_cve-2022-42896

Linux kernel source tree modified to demonstrate or patch CVE-2022-42896, a use-after-free vulnerability in the netfilter subsystem, for analysis and…

binary-exploitationeducationexploitation+2

3 years ago

linux-4.19.72_CVE-2020-27786

trinadh465/linux-4.19.72_cve-2020-27786

Kernel source tree for Linux 4.19.72 with modifications related to CVE-2020-27786, intended for vulnerability analysis and educational study of the…

binary-exploitationeducationexploitation+2

3 years ago

Previous12 Next