Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
129 results
nrf24-injection preview

nrf24-injection

GitHubxswxm/nrf24-injection

A tool set for sniffing devices and launching attacks with Crazyradio

exploitationhardware-hackingpenetration-testing+1
18
8 years ago
CVE-2022-41040 preview

CVE-2022-41040

GitHubd3duct1v/cve-2022-41040

Code set relating to CVE-2022-41040

exploitationpenetration-testingreconnaissance+2
53 years ago
CVE-2023-23397 preview

CVE-2023-23397

GitHubgrn-bogo/cve-2023-23397

Python script to create a message with the vulenrability properties set

email-securityexploitationpayload-generation+2
43 years ago
CVE-2026-51947-Advisory preview

CVE-2026-51947-Advisory

GitHubtimtimxs/cve-2026-51947-advisory

Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left…

code-analysisexploitationpenetration-testing+2
1 month ago
CVE-2025-57833 preview

CVE-2025-57833

GitHubmkway/cve-2025-57833

We've set up an environment to test CVE-2025-57833. This environment was built using AI, so it's subject to ongoing modification.

code-analysiseducationpenetration-testing+3
211 months ago
CVE-2025-2563 preview

CVE-2025-2563

GitHubnxploited/cve-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is…

educationexploitationpayload-development+5
4 months ago
wvctf preview

wvctf

GitHubsyn-4ck/wvctf

WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…

ctfeducationlabs-practice+3
12 years ago
Explosive-As-Hell-MCS-Qualifer-Web-500 preview

Explosive-As-Hell-MCS-Qualifer-Web-500

GitHubabdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

binary-exploitationctfeducation+7
4 months ago
CVE-2024-6387_Check preview

CVE-2024-6387_Check

GitHubsardine-web/cve-2024-6387_check

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some…

exploitationnetwork-securitypenetration-testing+2
12 years ago
redis-exploitation preview

redis-exploitation

GitHubknqyf263/redis-exploitation

CONFIG SET

database-securityeducationexploitation+3
17 years ago
zerologon preview

zerologon

GitHubcarlos55ml/zerologon

Set of scripts, to test and exploit the zerologon vulnerability (CVE-2020-1472).

exploitationlateral-movementpassword-attacks+3
4 years ago
setup-cve-2015-8562 preview

setup-cve-2015-8562

GitHublorenzodegiorgi/setup-cve-2015-8562

Docker-compose to set up a test environment for exploiting CVE-2015-8562

educationexploitationlabs-practice+3
5 years ago
PowerShell-PrintNightmare preview

PowerShell-PrintNightmare

GitHubsyntaxbearror/powershell-printnightmare

A collection of scripts to help set the appropriate registry keys for CVE-2021-34527

configuration-auditingeducationexploitation+3
5 years ago
CVE-2020-26732 preview
Archived

CVE-2020-26732

GitHubswzhouu/cve-2020-26732

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session

information-gatheringmisconfigurationpenetration-testing+2
13 years ago
FullPowers preview
Archived

FullPowers

GitHubitm4n/fullpowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

exploitationpenetration-testingpost-exploitation+2
7006 years ago
pacu preview

pacu

GitHubrhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-securitydata-exfiltrationexploit-frameworks+5
5.3k4 months ago
MFASweep preview

MFASweep

GitHubdafthack/mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

authenticationcloud-securitypenetration-testing+2
1.7k4 months ago
lsassy preview

lsassy

GitHublogin-securite/lsassy

Extract credentials from lsass remotely

information-gatheringpenetration-testingpost-exploitation+1
2.2k5 months ago
Previous123…8Next