Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

189 results

CVE-2026-93958

hackspeak/cve-2026-93958

Authenticated command injection PoC for D-Link R95/BE9500 DHMAPI SetTimeSettings, achieving root RCE via NTPServer backtick injection, with full…

command-and-controlembedded-systems-securityexploitation+7

1 month ago

CVE-2022-37706

d3ndr1t30x/cve-2022-37706

Privilege escaltion exploit script for Boardlight machine on HackTheBox. I had access as the Larissa user and ran this script from the /tmp…

exploitationpenetration-testingpost-exploitation+3

11 year ago

POC-Bash-CVE-2021-3560

withinonestem/poc-bash-cve-2021-3560

Script Bash -- CVE-2021-3560

exploitationpenetration-testingpost-exploitation+2

1 year ago

CVE-2025-9074

c0gnit00/cve-2025-9074

PHP poc, exploit for CVE-2025-9074

cloud-securitycommand-and-controlcontainer-escape+8

4 months ago

abrt_root

initstring/abrt_root

Privilege escalation in Fedora Linux via ABRT (Automatic Bug Reporting Tool): CVE-2025-12744

exploitationpenetration-testingpost-exploitation+3

710 months ago

CVE-2026-60004-gitea-0day

sachinart/cve-2026-60004-gitea-0day

CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth RCE

ctfexploitationpenetration-testing+3

2 months ago

CVE-2026-48908-SP-Page-Builder-Joomla

gagaltotal/cve-2026-48908-sp-page-builder-joomla

CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE

command-and-controlexploitationpayload-development+6

3 months ago

CVE-2025-53770

exfil0/cve-2025-53770

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE)…

command-and-controlexploitationids-ips-evasion+7

51 year ago

offensive-security-lab-1

mafiosohack/offensive-security-lab-1

A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue (CVE-2017-0143) exploit. Includes scanning, exploitation…

educationexploitationexploit-frameworks+4

1 year ago

CVE-2026-87902-Toolkit

tc4dy/cve-2026-87902-toolkit

WordPress CVE-2026-87902 LFI-to-RCE toolkit with a weaponized exploit chain (PEAR RCE, webshell, admin creation, loot) and a non-intrusive…

defensive-toolseducationexploitation+8

139 days ago

CVE-2026-85706-PoC-Toolkit

tc4dy/cve-2026-85706-poc-toolkit

Python toolkit for CVE-2026-85706 GitLab unauth file read: weaponized exploit with loot, shell, mass scan, plus non-intrusive SafeChecker audit and…

defensive-toolsexploitationinformation-gathering+7

113 days ago

CVE-2022-1257

kayes817/cve-2022-1257

Proof-of-concept exploit for CVE-2022-1257 that extracts and decrypts stored credentials from the McAfee Agent database (ma.db) using PowerShell.

educationexploitationpassword-cracking+2

1 year ago

Archived

K0mraid3s-System-Shell-PREBUILT

k0mraid3/k0mraid3s-system-shell-prebuilt

Exploit I discovered in October of 2022 with androids Package manager binary (pm) and the way it handled debugging flags, patched out by march 2023.…

android-securityexploitationmobile-app-pentesting+5

892 years ago

zygote-injection-toolkit

anonymous941/zygote-injection-toolkit

A command-line utility to exploit Android Zygote injection (CVE-2024-31317)

android-securitydata-exfiltrationexploitation+5

6310 months ago

Win10Pcap-Exploit

rootkitsmm-zz/win10pcap-exploit

Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )

binary-exploitationexploitationpost-exploitation+2

6111 years ago

CVE-2026-65643-PoC-Toolkit

tc4dy/cve-2026-65643-poc-toolkit

Red/Blue team toolkit for CVE-2026-65643, a cPanel domain parking RCE. Includes exploit with reverse shell, webshell, persistence, and mass scanning,…

command-and-controlexploitationpayload-development+7

1313 days ago

CVE-2026-102489

horizon3ai/cve-2026-102489

Proof-of-concept exploit for CVE-2026-102489 in Zammad: chains a WebSocket session leak into authenticated session hijacking and unauthenticated…

exploitationpayload-developmentpost-exploitation+4

614 days ago

CVE-2025-32432-exploit-by-P34NUT

p34nut2/cve-2025-32432-exploit-by-p34nut

Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail

exploitationpayload-developmentpenetration-testing+6

81 month ago

Previous 1 234…11 Next