Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
107 results
CVE-2026-19658 preview

CVE-2026-19658

GitHubmurrez/cve-2026-19658

Python 3 checker and exploit helper for CVE-2026-19658, a WordPress Give Tributes PHP object injection flaw, with FOFA target discovery and legacy…

exploitationinformation-gatheringpayload-development+7
14 days ago
CVE-2026-76578 preview

CVE-2026-76578

GitHubbrainbob/cve-2026-76578

Proof-of-concept exploit for CVE-2026-76578 and CVE-2026-76560, chaining anonymous LDAP ADD with a 389-ds SELFDN bypass to gain FreeIPA domain admin…

authenticationexploitationidentity-management+5
16 days ago
CVE-2026-0073 preview

CVE-2026-0073

GitHubdevtint/cve-2026-0073

Weaponized proof-of-concept for CVE-2026-0073, an Android adbd authentication bypass enabling zero-click remote root access via Wireless ADB, with…

android-securityexploitationmobile-security+5
44 months ago
CVE-2026-0073-Android-ADBD-bypass-POC preview

CVE-2026-0073-Android-ADBD-bypass-POC

GitHubmartinpsdev/cve-2026-0073-android-adbd-bypass-poc

CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using…

android-securityexploitationmobile-security+3
224 months ago
cve-2023-5966 preview

cve-2023-5966

GitHubll104567/cve-2023-5966

Proof-of-concept exploit for CVE-2023-5966, an arbitrary file upload vulnerability in EspoCRM 2.7.4 and earlier, enabling remote code execution via a…

exploitationpayload-developmentpenetration-testing+2
2 years ago
CVE-2021-4034 preview

CVE-2021-4034

GitHubzhzyker/cve-2021-4034

polkit pkexec Local Privilege Vulnerability to Add custom commands

exploitationexploit-frameworkspenetration-testing+2
454 years ago
CrystalPotato preview

CrystalPotato

GitHubricardojoserf/crystalpotato

Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run…

adversarial-attackexploitationpenetration-testing+3
1191 month ago
BurpSuiteSharpener preview

BurpSuiteSharpener

GitHubmdsecresearch/burpsuitesharpener

Enhances Burp Suite with tab management, customizable themes, keyboard shortcuts, title renaming, window position memory, and UI utilities for faster…

penetration-testingutilities-frameworksweb-security
5233 years ago
TOTPAuthenticate preview

TOTPAuthenticate

GitHubhannah-portswigger/totpauthenticate

This extension, for Burp Suite Enterprise Edition, utilizes session handling rules to provide a TOTP token to outgoing requests.

api-security-testingauthenticationpenetration-testing+1
92 years ago
CsWhispers preview

CsWhispers

GitHubrasta-mouse/cswhispers

Source generator to add D/Invoke and indirect syscall methods to a C# project.

ids-ips-evasionpayload-developmentpenetration-testing+3
1922 years ago
MAL-005 preview

MAL-005

GitHubmbadanoiu/mal-005

MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB

exploitationpenetration-testingvulnerability-analysis+1
2 years ago
jwt-reauth preview

jwt-reauth

GitHubnccgroup/jwt-reauth

Caches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.

api-securityauthenticationpenetration-testing+3
1063 years ago
CVE-2026-0073 preview

CVE-2026-0073

GitHub0xblackash/cve-2026-0073

CVE-2026-0073

android-securityauthenticationexploitation+3
54 months ago
CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN preview

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

GitHubctn-qvo/cve-2026-0073-android-adbd-bypass-poc_zh_cn

CVE-2026-0073-Android-ADBD-bypass-POC汉化版

android-securitybinary-exploitationeducation+3
33 months ago
sslnuke preview

sslnuke

GitHubjtripper/sslnuke

Transparent proxy that decrypts SSL traffic and prints out IRC messages.

ids-ips-evasionnetwork-securitypacket-sniffing-analysis+3
7713 years ago
faraday_zap preview

faraday_zap

GitHubinfobyte/faraday_zap

Zap Extension for collaboration in Faraday

api-security-testingpenetration-testingvulnerability-scanners+2
26 months ago
zaphoster preview

zaphoster

GitHubmindpatch/zaphoster

Fix host header error in zaproxy

penetration-testingscripting-automationutilities-frameworks+2
15 years ago
HolyGrail preview

HolyGrail

GitHubblacksnufkin/holygrail

BYOVD hunter to help prioritize windows drivers worth manual analysis

binary-analysisexploitationpenetration-testing+2
1321 year ago
Previous123456Next