Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

918 results

ecp_slap

zyn3rgy/ecp_slap

CVE-2020-0688 PoC

exploitationpayload-generationpenetration-testing+3

111 year ago

CVE-2023-23397

vlad-a-man/cve-2023-23397

CVE-2023-23397 PoC

exploitationpassword-attackspayload-generation+3

83 years ago

CVE-2023-37903

7h3h4ckv157/cve-2023-37903

Standalone proof-of-concept exploit for CVE-2023-37903 that triggers the targeted vulnerability and establishes a reverse shell.

exploitationpayload-generationpenetration-testing+3

92 years ago

Spring0DayCoreExploit

stevemats/spring0daycoreexploit

{ Spring Core 0day CVE-2022-22963 }

exploitationpayload-generationpenetration-testing+2

34 years ago

bad-dicom

kosmokato/bad-dicom

Explotation framework for CVE-2019-11687

binary-exploitationembedded-systems-securityexploitation+3

61 year ago

EXPLOITER

athexblackhat/exploiter

Automated Exploit for CVE-2024-0044 .

android-securityeducationexploitation+3

611 months ago

CVE-2026-9090-poc

kimdir01/cve-2026-9090-poc

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

authenticationexploitationpayload-generation+4

23 days ago

CVE-2025-64512-pdfminer-PoC

oguzylmzx/cve-2025-64512-pdfminer-poc

PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF

educationexploitationpayload-development+3

23 days ago

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

hunt-benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

PoC demonstrating quadratic DoS in Elixir html_sanitize_ex via crafted HTML; includes timing benchmarks, remote exploitation curl, and verification…

adversarial-attackexploitationpayload-generation+3

26 days ago

React2Shell-PoC

jensnesten/react2shell-poc

RCE exploit PoC for CVE-2025-55182 and CVE-2025-66478 in Next.js and React Server Components with scanner and exploitation tools.

educationexploitationpayload-generation+3

68 months ago

CVE-2019-3719

jiansiting/cve-2019-3719

Proof-of-concept exploit for CVE-2019-3719, a remote code execution vulnerability in Dell SupportAssist. Executes arbitrary payloads against…

exploitationpayload-generationpenetration-testing+3

47 years ago

CVE-2026-64638

horkimhab/cve-2026-64638

CVE-2026-64638 - Draft or TODO

educationexploitationlabs-practice+5

1 month ago

CVE-2024-37054-PoC

jimmexploit/cve-2024-37054-poc

Proof-of-concept exploit for CVE-2024-37054, a critical deserialization vulnerability in MLflow. Includes a full exploit script and a malicious model…

educationexploitationpayload-generation+3

73 months ago