Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

968 results

CVE-2025-32463

1xpwn/cve-2025-32463

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

privilege-escalationexploitationpenetration-testing+2

2 months ago

CVE-2026-2766-but-with-wasm

sneakynachos/cve-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm

vulnerability-analysisexploitationshellcode+2

12 months ago

fastjson-cve-2026-16723

learner330/fastjson-cve-2026-16723

Detailed CVE-2026-16723 analysis and exploit kit for Fastjson 1.2.83 RCE, covering vulnerable code paths, malicious JAR/bytecode generation, and a…

payload-generationvulnerability-analysisexploitation+4

52 months ago

MySQL-Remote-Root-Code-Execution

ashrafdev/mysql-remote-root-code-execution

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no…

privilege-escalationvulnerability-analysisexploitation+3

92 months ago

ghostsplice

asset-group/ghostsplice

Ghostsplice repository: PoC for Cross-Channel Trust Fragmentation Attack

data-exfiltrationsocial-engineeringred-teaming+3

92 months ago

powershell-reverse-tcp

ivan-sincek/powershell-reverse-tcp

PowerShell scripts for communicating with a remote host.

privilege-escalationexploitationids-ips-evasion+6

3002 months ago

ransomwhere

hazcod/ransomwhere

A PoC ransomware sample to test out your ransomware response strategy.

encryption-decryption-toolspost-exploitationred-teaming+3

2142 months ago

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

cerberusmrxi/cve-2025-55182-advanced-react-server-components-rce-exploit

Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration,…

reconnaissancevulnerability-scannersexploitation+6

12 months ago

skewrun

jvbotelho/skewrun

Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.

reconnaissanceexploitationinformation-gathering+3

772 months ago

ExtensionSpoofer

henriksb/extensionspoofer

Spoof file icons and extensions in Windows

phishing-toolsids-ips-evasionimpersonation-tools+3

1872 months ago

pois0nSword

genericcoding/pois0nsword

A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1

exploit-frameworksios-securityvulnerability-analysis+5

582 months ago

Fritter

0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

payload-generationexploitationshellcode+5

2482 months ago

sh4d0wup

kpcyrd/sh4d0wup

Signing-key abuse and update exploitation framework

exploitationpenetration-testingcommand-and-control+3

1312 months ago

mariadb-13-rce-lab

dinosn/mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and…

privilege-escalationvulnerability-analysisexploitation+5

332 months ago

shellcode

0xdea/shellcode

A collection of my shellcode samples.

exploitationshellcodepenetration-testing+3

262 months ago

tactical-exploitation

0xdea/tactical-exploitation

Modern tactical exploitation toolkit.

osintreconnaissanceweb-vulnerability-scanners+8

8662 months ago

Android-Imgui-Template

traitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityexploitationmobile-app-pentesting+4

172 months ago

httpx

mythicc2profiles/httpx

Configurable, Community driven, HTTP C2 Profile

defensive-toolspenetration-testing-frameworksencryption-decryption-tools+5

322 months ago

Previous 1…678…54 Next