Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1641 results

CVE-2017-3599

secforce/cve-2017-3599

Proof of concept exploit for CVE-2017-3599

exploitationpayload-developmentpenetration-testing+2

9 years ago

CVE-2021-42342

mr-xn/cve-2021-42342

Proof-of-concept exploit for CVE-2021-42342, a remote code execution vulnerability in GoAhead web server, demonstrating LD_PRELOAD injection via CGI…

exploitationpayload-developmentpenetration-testing+2

414 years ago

CVE-2021-43297-POC

bitterzzzz/cve-2021-43297-poc

Proof-of-concept exploit for CVE-2021-43297, achieving remote code execution in Apache Dubbo <= 2.7.13 via Hessian-Lite deserialization.

exploitationpayload-developmentpenetration-testing+2

394 years ago

CVE-2026-34159

casp3r0x0/cve-2026-34159

0 Click RCE exploit for CVE-2026-34159 Lama.cpp RPC server

exploitationpayload-developmentpenetration-testing+3

284 months ago

WebSphere-WSIF-gadget

silentsignal/websphere-wsif-gadget

CVE-2020-4464 / CVE-2020-4450

exploitationpayload-developmentpenetration-testing+3

365 years ago

CVE-2025-32463

1xpwn/cve-2025-32463

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

exploitationpayload-developmentpenetration-testing+2

261 month ago

CVE-2024-50629_50631

kiddo-pwn/cve-2024-50629_50631

N-day Exploit for Synology BeeStation RCE by DEVCORE (Pwn2Own 2024)

exploitationpayload-developmentpenetration-testing+3

399 months ago

Android-Imgui-Template

traitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityeducationexploitation+4

221 month ago

CVE-2017-13253

tamirzb/cve-2017-13253

PoC code for CVE-2017-13253

android-securitybinary-exploitationexploitation+3

375 years ago

CVE-2019-0232

jaiguptanick/cve-2019-0232

Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (RCE)

exploitationpayload-developmentpenetration-testing+3

335 years ago

Zero-Logon-Exploit

sq00ky/zero-logon-exploit

Python script exploiting Zerologon (CVE-2020-1472) to perform Netlogon authentication bypass and reset domain controller password to null.

exploitationexploit-frameworkspayload-development+2

373 years ago

CVE-2026-0300-POC

p3nt3st3r-star/cve-2026-0300-poc

Proof-of-concept for CVE-2026-0300, a critical buffer overflow in PAN-OS User-ID Portal enabling unauthenticated remote code execution with root…

exploitationpayload-developmentpenetration-testing+3

224 months ago

CVE-2021-20837

orangmuda/cve-2021-20837

XMLRPC - RCE in MovableTypePoC

exploitationpayload-developmentpenetration-testing+2

214 years ago

dotNetPELoader

iss4cf0ng/dotnetpeloader

A C# PE loader for x64 and x86 PE files.

binary-analysisexploitationpayload-development+2

576 months ago

CVE-2024-4577-RCE

gh-ost00/cve-2024-4577-rce

Exploit for PHP CGI Argument Injection (CVE-2024-4577) enabling remote code execution on vulnerable Windows servers running Apache and PHP-CGI.…

exploitationpayload-developmentpenetration-testing+3

252 years ago

fastjson-1.2.58-rce

jas502n/fastjson-1.2.58-rce

fastjson-1.2.58-rce with h2 database

exploitationpayload-developmentvulnerability-analysis+1

347 years ago

CVE-2018-7750

jm33-m0/cve-2018-7750

an RCE (remote command execution) approach of CVE-2018-7750

exploitationpayload-developmentpenetration-testing+2

217 years ago

CVE-2019-15858

generaleg/cve-2019-15858

Unauthenticated RCE at Woody Ad Snippets / CVE-2019-15858 (PoC)

exploitationpayload-developmentpenetration-testing+2

327 years ago

Previous 1…192021…92 Next