Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1525 results

arcgis-web-shell

ryanpohlner/arcgis-web-shell

ArcGIS Enterprise geoprocessing service that publishes a Python toolbox for command execution.

exploitationpayload-developmentpenetration-testing+5

4 months ago

Hacking-Cheatsheets

ilias1988/hacking-cheatsheets

A comprehensive collection of penetration testing cheatsheets, guides, and tools.

curated-resourcesdigital-forensicseducation+9

64422h 51m ago

pentest

zishanadthandar/pentest

Jekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…

ctfcurated-resourceseducation+7

74918 days ago

Internal-Network-Penetration-testing

aniket2912/internal-network-penetration-testing

Educational module on internal network penetration testing: methodology, attack vectors, enumeration, exploitation, privilege escalation, and…

educationlabs-practicelateral-movement+9

11 year ago

mali-pagecache-root

c4psu13/mali-pagecache-root

TCL 50C721 (RTD1319 / Mali-G31) root toolkit — autonomous CVE-2022-22706 exploit chain

android-securitybinary-exploitationembedded-systems-security+7

46 days ago

SudoStamp

ritwick7/sudostamp

Approve sudo on a Linux workstation with a fingerprint on your Android phone. LAN only; the ECDSA key never leaves the phone's TEE and speaks the…

android-securityauthenticationauthentication-authorization+5

9 days ago

CoercedPotato

prepouce/coercedpotato

Windows local privilege escalation tool that abuses SeImpersonatePrivilege via MS-RPRN and MS-EFSR RPC coercion to execute commands as SYSTEM.

exploitationpayload-developmentpenetration-testing+3

4022 months ago

Review.CVE-2021-3156

constantinefedorov/review.cve-2021-3156

Python proof-of-concept exploit for CVE-2021-3156 (Baron Samedit), a sudoedit heap overflow enabling local privilege escalation to root on vulnerable…

binary-exploitationexploitationpenetration-testing+3

1 year ago

CVE-2026-36213-poc

nt2dev/cve-2026-36213-poc

CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation

exploitationmisconfigurationpenetration-testing+2

1 month ago

FreePBX-SQLi-RCE

hexbytee/freepbx-sqli-rce

Python proof-of-concept exploiting CVE-2025-57819, an unauthenticated SQL injection in FreePBX that chains admin creation, cron webshell deployment,…

exploitationpayload-developmentpenetration-testing+4

14 months ago

plausible-editor-invite

abraxas/plausible-editor-invite

Plausible Analytics master d44e104 - High - Remote - Privilege leftover - editor people HTML leaks transfer nanoid

exploitationlabs-practicepenetration-testing+4

116 days ago

pfsense-acb-restore-priv

abraxas/pfsense-acb-restore-priv

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - ACB restore

exploitationlabs-practicepenetration-testing+4

19 days ago

pfsense-wizard-uid0

abraxas/pfsense-wizard-uid0

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - wizard uid 0

exploitationlabs-practicepenetration-testing+4

19 days ago

AdStrike

capture0x/adstrike

AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…

ai-securitycommand-and-controlexploitation+7

40317 days ago

joomla-media-override

abraxas/joomla-media-override

Joomla 6.1.3 - High - Remote - Overwrite - media manager overwrite leftover

exploitationlabs-practicepenetration-testing+5

5 days ago

phpmyadmin-issuperuser

abraxas/phpmyadmin-issuperuser

phpMyAdmin 5.2.3 - High - Remote - leftover - isSuperUser check skipped

exploitationlabs-practicepenetration-testing+4

5 days ago

PPLwindow

r41n3rzuf477/pplwindow

Proof-of-concept PPL bypass abusing the NtUserGetWindowProcessHandle syscall to obtain a handle to protected Windows processes without admin…

binary-exploitationexploitationpenetration-testing+4

5610 months ago

QuickAssist_UAC_Bypass

r41n3rzuf477/quickassist_uac_bypass

UAC bypass PoC abusing the UIAccess QuickAssist binary to load an attacker-controlled DLL via WebView2 BrowserExecutableFolder, then hijack elevated…

defensive-toolsexploitationpayload-development+4

2453 months ago

Previous12…85 Next