Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

60 results

CVE-2024-6387

l0n3m4n/cve-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

exploitationnetwork-securitypayload-development+6

114

2 years ago

CVE-2025-53770

hazcod/cve-2025-53770

Go-based scanner that detects SharePoint CVE-2025-53770 RCE vulnerability by injecting a harmless marker into the ToolBox widget and verifying its…

exploitationpayload-developmentpenetration-testing+3

458 months ago

CVE-2026-19658

murrez/cve-2026-19658

Python 3 checker and exploit helper for CVE-2026-19658, a WordPress Give Tributes PHP object injection flaw, with FOFA target discovery and legacy…

exploitationinformation-gatheringpayload-development+7

119 days ago

CVE-2024-21546

digitalsurgn/cve-2024-21546

Automated exploit toolkit and detection template for CVE-2024-21546, an unauthenticated RCE in UniSharp Laravel Filemanager, with WAF evasion and…

code-analysisexploitationpayload-development+4

1 month ago

SharpShooter

mdsecactivebreach/sharpshooter

Payload Generation Framework

command-and-controldns-analysisexploitation+9

2.0k2 years ago

singularity

nccgroup/singularity

A DNS rebinding attack framework.

dns-analysisexploitationinformation-gathering+6

1.3k2 months ago

pwn_jenkins

gquere/pwn_jenkins

Notes about attacking Jenkins servers

exploitationinformation-gatheringpassword-attacks+6

2.1k2 years ago

tactical-exploitation

0xdea/tactical-exploitation

Modern tactical exploitation toolkit.

exploitationinformation-gatheringosint+8

8652 months ago

Pentest-tools

al1ex/pentest-tools

Intranet penetration tools

exploitationinformation-gatheringlateral-movement+8

8784 years ago

ronin

ronin-rb/ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…

cryptographyctfdns-analysis+9

7619 months ago

Homework-of-Python

3gstudent/homework-of-python

Python codes of my blog.

exploitationinformation-gatheringpassword-attacks+5

4093 years ago

NextRce

ynsmroztas/nextrce

React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)

command-and-controlexploitationpayload-development+5

26610 months ago

CVE-2020-2551

hktalent/cve-2020-2551

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

exploitationpayload-developmentpenetration-testing+3

2113 years ago

toastnotify-bof

brmkit/toastnotify-bof

abusing windows toast notifications for fun and user manipulation

information-gatheringpayload-developmentphishing+3

1063 months ago

python-hacklib

lazorfuzz/python-hacklib

hacklib - pentesting, port scanning, and logging in anywhere with Python

exploitationinformation-gatheringpassword-attacks+4

1007 years ago

skewrun

jvbotelho/skewrun

Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.

exploitationinformation-gatheringpayload-development+3

782 months ago

BOF-pack-1

jsecu/bof-pack-1

A care package of useful bofs for red team engagments

information-gatheringpayload-developmentpost-exploitation+2

521 year ago

cve-2017-5638

xsscx/cve-2017-5638

Example PoC Code for CVE-2017-5638 | Apache Struts Exploit

exploitationinformation-gatheringpayload-development+3

229 years ago

Previous12 3 4 Next