Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

113 results

CVE-2024-23692-RCE-in-Rejetto-HFS

jakabakos/cve-2024-23692-rce-in-rejetto-hfs

Unauthenticated RCE Flaw in Rejetto HTTP File Server (CVE-2024-23692)

exploitationpayload-generationpenetration-testing+3

2 years ago

BadBlue

phuchaudeveloper/badblue

CVE-2024-21306 BadBlue implementation (Using DuckyScript)

bluetooth-securityexploitationhardware-iot-security+3

112 years ago

CVE-2024-37032_CVE-2024-45436

pankass/cve-2024-37032_cve-2024-45436

CVE-2024-45436

exploitationpayload-generationremote-access-tool+2

81 year ago

CVE-2024-21762_FortiNet_PoC

abrewer251/cve-2024-21762_fortinet_poc

Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.

exploitationpayload-generationpenetration-testing+3

41 year ago

CVE-2024-0195-SpiderFlow

gh-ost00/cve-2024-0195-spiderflow

CVE-2024-0195 Improper Control of Generation of Code ('Code Injection')

code-analysisexploitationpayload-generation+3

52 years ago

CVE-2024-4577-nuclei

0x20c/cve-2024-4577-nuclei

CVE-2024-4577 nuclei-templates

exploitationpayload-generationpenetration-testing+2

52 years ago

CVE-2024-3640_WafBypass

h1ng007/cve-2024-3640_wafbypass

CVE-2024-3640绕过Waf进行漏洞利用

exploitationpayload-generationpenetration-testing+3

31 year ago

CVE-2024-42640

ktn1990/cve-2024-42640

Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower)

exploitationpayload-generationpenetration-testing+3

21 year ago

PHP_8.1.x_Exploit

gl1tch0x1/php_8.1.x_exploit

Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)

command-and-controlcrawlerexploitation+7

16 months ago

CVE-2024-42008-9-exploit

foxer131/cve-2024-42008-9-exploit

The scripts in this repository are made to abuse CVE-2024-42008 and CVE-2024-42009. Both of these CVEs are vulnerabilities found on Roundcube 1.6.7

exploitationpayload-generationpenetration-testing+2

1 year ago

CVE-2024-28397-RCE

vitaciminipi/cve-2024-28397-rce

CVE-2024-28397 - Remote Code Execution From Vulnerable JS2PY

exploitationpayload-generationremote-access-tool+2

1 year ago

CVE-2024-36401-WoodpeckerPlugin

funnydog896/cve-2024-36401-woodpeckerplugin

CVE-2024-36401-GeoServer Property 表达式注入 Rce woodpecker-framework 插件

exploitationpayload-developmentpayload-generation+4

1 year ago

CVE-2024-31351_wordpress_exploit

ktn1990/cve-2024-31351_wordpress_exploit

Wordpress - Copymatic – AI Content Writer & Generator <= 1.6 - Unauthenticated Arbitrary File Upload

exploitationpayload-generationpenetration-testing+3

2 years ago

CVE-2024-27876

0xilis/cve-2024-27876

libAppleArchive exploit maker, read the writeup here https://snoolie.gay/blog/CVE-2024-27876

binary-exploitationexploitationpayload-generation+2

461 year ago

CVE-2024-52375

nxploited/cve-2024-52375

WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

educationexploitationpayload-generation+3

1 year ago

cve-2024-26229

shinspace92/cve-2024-26229

Nim touch up of CVE 2024 26229

binary-exploitationeducationexploitation+2

3 months ago

CVE-2024-24590-ClearML-RCE-Exploit

rippsec/cve-2024-24590-clearml-rce-exploit

CVE-2024-24590 – ClearML RCE via unsafe pickle artifact deserialization (0.17.0–1.14.2)

command-and-controleducationexploitation+6

66 months ago

CVE-2024-0044

hackerronin/cve-2024-0044

a vulnerability affecting Android version 12 & 13

android-securityexploitationmobile-app-pentesting+3

62 years ago

Previous 1 2 3 4 567 Next