Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

81 results

RansomLord

malvuln/ransomlord

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…

binary-exploitationdefensive-toolsexploitation+4

516

1 year ago

CVE-2019-0708

wqsemc/cve-2019-0708

initial exploit for CVE-2019-0708, BlueKeep CVE-2019-0708 BlueKeep RDP Remote Windows Kernel Use After Free The RDP termdd.sys driver improperly…

exploitationexploit-frameworkspayload-development+3

126 years ago

CVE-2022-1329

dexit/cve-2022-1329

The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check…

code-analysisexploitationpayload-development+3

3 years ago

CVE-2021-42362

samiba6/cve-2021-42362

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the…

exploitationpayload-developmentremote-access-tool+2

1 year ago

Voidgate

vxcrypt0r/voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by…

adversarial-attackdebuggersids-ips-evasion+3

5992 years ago

CVE-2019-11932-SupportApp

valbrux/cve-2019-11932-supportapp

This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system() function address…

android-securitybinary-exploitationexploitation+3

386 years ago

CVE-2025-59528-PoC

loaxert/cve-2025-59528-poc

PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB

api-security-testingeducationexploitation+3

11 days ago

Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution-Exploit

icmpoff/apache-2.4.49-2.4.50-traversal-remote-code-execution-exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If…

exploit-frameworkspayload-developmentpenetration-testing-frameworks+3

14 years ago

CVE-2018-6574-go-get-RCE

hasharmujahid/cve-2018-6574-go-get-rce

The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the…

educationexploitationpayload-development+2

3 years ago

CVE-2017-8759

vysecurity/cve-2017-8759

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

exploitationpayload-developmentpenetration-testing+3

1768 years ago

exe2powershell

yanncam/exe2powershell

exe2powershell - exe2bat reborn for modern Windows

payload-developmentpayload-generationpenetration-testing+2

1755 years ago

QLinspector

synacktiv/qlinspector

Finding Java/C# gadget chains with CodeQL

code-analysisexploitationpayload-development+2

1881 month ago

cve-2021-34527

hackerhouse-opensource/cve-2021-34527

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

binary-exploitationexploitationpayload-development+3

236 months ago

CVE-2017-1000486

mogwailabs/cve-2017-1000486

Proof of Concept Exploit for PrimeFaces 5.x EL Injection (CVE-2017-1000486)

code-analysisexploitationpayload-development+3

93 years ago

RemoteDLLInjector

al1ex/remotedllinjector

RemoteDLLInjector

exploitationpayload-developmentpenetration-testing+3

95 years ago

CVE-2018-6574

s-p4rk/cve-2018-6574

binary-exploitationexploitationpayload-development+2

28 days ago

CVE-2020-27199

9lyph/cve-2020-27199

CVE-2020-27199

authenticationexploitationinformation-gathering+6

71 year ago

CVE-2021-44967

godylockz/cve-2021-44967

POC for CVE-2021-44967: LimeSurvey RCE

exploitationpayload-developmentpenetration-testing+3

11 year ago

Previous12 3 4 5 Next