Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

111 results

CVE-2019-18935

alanbarret/cve-2019-18935

Nuclei template and validation scripts for detecting CVE-2019-18935, a critical .NET deserialization RCE in Telerik UI for ASP.NET AJAX, with…

dynamic-analysis-sandboxingeducationexploitation+4

9 months ago

reproducer-poc-CVE-2022-0847

stfnw/reproducer-poc-cve-2022-0847

Very rough PoC for detecting/reproducing CVE-2022-0847 (dirty pipe) through random generation of syscalls and differential fuzzing against a model.

binary-exploitationdynamic-analysis-sandboxingexploitation+3

7 months ago

cve-2017-9822

tnot123/cve-2017-9822

In-depth technical analysis and proof-of-concept for CVE-2017-9822, an insecure deserialization vulnerability in DotNetNuke leading to remote code…

binary-exploitationcode-analysisdebuggers+8

11 months ago

captain4554.github.io

captain4554/captain4554.github.io

🔍 Scan for CVE-2025-55182 vulnerabilities with a hybrid tool that combines static and dynamic analysis for improved security assessments.

dynamic-analysis-sandboxingexploitationpenetration-testing+3

16 months ago

CVE-2025-4427-CVE-2025-4428

rxerium/cve-2025-4427-cve-2025-4428

Detection for CVE-2025-4427 and CVE-2025-4428

code-analysisdynamic-analysis-sandboxingexploitation+3

10 months ago

Spring-Boot-Tomcat-CVE-2025-24813

n0n-zer0/spring-boot-tomcat-cve-2025-24813

POC for CVE-2025-24813 using Spring-Boot

dynamic-analysis-sandboxingexploitationpayload-development+3

1 year ago

Text4shell--Automated-exploit---CVE-2022-42889

adarshpv9746/text4shell--automated-exploit---cve-2022-42889

Automated exploit for CVE-2022-42889 (Text4Shell) with a vulnerable Dockerized app for testing and manual exploitation guidance.

dynamic-analysis-sandboxingexploitationpayload-development+3

3 years ago

emba

e-m-b-a/emba

EMBA - The firmware security analyzer

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+8

3.7k1 day ago

TriforceAFL

nccgroup/triforceafl

AFL/QEMU fuzzing with full-system emulation.

binary-analysisdynamic-analysis-sandboxingfuzzing+2

6448 years ago

redai

kpolley/redai

AI-driven vulnerability discovery and live validation

ai-securitydynamic-analysis-sandboxingeducation+6

3414 months ago

bradamsa

ikkisoft/bradamsa

Burp Suite extension to generate Intruder payloads using Radamsa

dynamic-analysis-sandboxingfuzzingpayload-generation+3

919 years ago

log4j-Scan-Burpsuite

snow0715/log4j-scan-burpsuite

Log4j漏洞（CVE-2021-44228）的Burpsuite检测插件

dynamic-analysis-sandboxingexploitationpenetration-testing+3

134 years ago

react2shell_analyzer

benrich127n/react2shell_analyzer

a dart package to analyze CVE-2025-55182 react2shell

dynamic-analysis-sandboxingpenetration-testingvulnerability-analysis+3

19 months ago

CVE-2025-55182-react2shell

aastikgakhar/cve-2025-55182-react2shell

Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.

dynamic-analysis-sandboxingexploitationpenetration-testing+3

9 months ago

Archived

needle

reverseclabs/needle

The iOS Security Testing Framework

binary-analysisdynamic-analysis-sandboxingios-security+4

1.4k5 years ago

metasploitable3

rapid7/metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

dynamic-analysis-sandboxingeducationexploit-frameworks+4

5.7k1 year ago

sulley

openrce/sulley

A pure-python fully automated and unattended fuzzing framework.

dynamic-analysis-sandboxingexploitationfuzzing+3

1.4k5 years ago

frida-ios-hook

noobpk/frida-ios-hook

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

binary-analysisdynamic-analysis-sandboxingios-security+3

1.2k7 months ago

Previous 1 2 3 456 7 Next