Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

134+ results

CVE-2026-20127

sfewer-r7/cve-2026-20127

Exploit for Cisco Catalyst SD-WAN Controller authentication bypass (CVE-2026-20127) that forges DTLS CHALLENGE_ACK_ACK messages to gain unauthorized…

authenticationexploitationnetwork-security+3

5 months ago

CVE-2026-20131

sak110/cve-2026-20131

Detection and proof-of-concept exploit for CVE-2026-20131, a critical unauthenticated Java deserialization RCE in Cisco Secure FMC. Includes a safe…

educationexploitationlabs-practice+4

35 months ago

CVE-2026-20131-POC

p3nt3st3r-star/cve-2026-20131-poc

Proof-of-concept exploit for CVE-2026-20131, a pre-authentication RCE in Cisco Catalyst SD-WAN Controller and Manager, enabling admin access and…

exploitationnetwork-securitypenetration-testing+3

5 months ago

cve-2026-20127

gigachadusers/cve-2026-20127

Windows-based C++ network scanner that fingerprints Cisco SD-WAN/vManage services and checks for CVE-2026-20127 exposure via HTTP endpoint analysis.

information-gatheringnetwork-securitypenetration-testing+2

24 months ago

Ashwesker-CVE-2026-20045

dkstar11q/ashwesker-cve-2026-20045

Proof-of-concept exploit for CVE-2026-20045, a critical unauthenticated RCE in Cisco Unified Communications products, enabling command injection and…

command-and-controlexploitationpenetration-testing+2

67 months ago

CVE-2026-20180

kaleth4/cve-2026-20180

In-depth technical analysis of Cisco ISE RCE vulnerabilities, including exploitation techniques, evasion methods, and remediation strategies for…

educationexploitationlateral-movement+6

14 months ago

CVE-2026-20127_EXP

bugfor-pings/cve-2026-20127_exp

Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)利用EXP

exploitationpenetration-testingred-teaming+2

45 months ago

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

yonathanpy/cve-2026-20127-cisco-sd-wan-preauth-rce

Proof-of-concept exploit for CVE-2026-20127, a pre-authentication RCE in Cisco SD-WAN, demonstrating rogue peer registration and authentication…

educationexploitationpenetration-testing+3

25 months ago

Silent-Call

0xreadingsteiner/silent-call

Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)

authentication-authorizationexploitationpenetration-testing+4

2822 days ago

vamp-forticheck

vampsecure-labs/vamp-forticheck

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

information-gatheringmisconfigurationnetwork-security+5

15 days ago

Custom-Metasploit-Modules

k3ystr0k3r/custom-metasploit-modules

A list of custom Metasploit modules you can use for penetration testing.

exploitationexploit-frameworkspenetration-testing+3

61 year ago

vamp-forticheck

belky-me/vamp-forticheck

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

network-securitypenetration-testingred-teaming+2

15 days ago

cisco-SNMP-enumeration

nccgroup/cisco-snmp-enumeration

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

configuration-auditinginformation-gatheringnetwork-security+3

22610 years ago

Cisco-SNMP-Slap

nccgroup/cisco-snmp-slap

IP spoofing and SNMP community string brute-forcing tool to bypass ACLs on Cisco IOS devices, exfiltrate configuration files via TFTP.

exploitationinformation-gatheringnetwork-security+4

5911 years ago

DroppedConnection

nccgroup/droppedconnection

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

impersonation-toolspenetration-testingphishing-tools+2

1293 years ago

checker-cve2020-3452

mrcl0wnlab/checker-cve2020-3452

Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading

exploitationnetwork-securitypenetration-testing+3

176 years ago

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

fuzzlove/cisco-ucs-manager-2.2-1d-remote-command-execution

Cisco Bug: CSCur90888 - Cisco UCS Manager Remote Command Execution Vulnerability

exploitationpenetration-testingred-teaming+2

5 years ago

Previous12…8 Next