Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
28 results
RunasCs preview

RunasCs

GitHubantoniococo/runascs

RunasCs - Csharp and open version of windows builtin runas.exe

impersonation-toolslateral-movementpenetration-testing+3
1.4k
2 years ago
CVE-2026-64531 preview

CVE-2026-64531

GitHubhackspeak/cve-2026-64531

CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research

binary-exploitationexploitationprivilege-escalation+1
616 days ago
ovswrap-poc preview

ovswrap-poc

GitHubhackspeak/ovswrap-poc

Proof-of-concept exploit for CVE-2026-64531, a Linux kernel local privilege escalation in Open vSwitch, designed for patch validation and security…

binary-exploitationexploitationprivilege-escalation+1
616 days ago
SmmBackdoor preview

SmmBackdoor

GitHubcr4sh/smmbackdoor

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM…

exploitationfirmware-analysishardware-hacking+4
6322 years ago
PHP_imap_open_exploit preview

PHP_imap_open_exploit

GitHubbo0om/php_imap_open_exploit

Bypassing disabled exec functions in PHP (c) CRLF

exploitationprivilege-escalationvulnerability-analysis+1
4035 years ago
CVE-2026-39987 preview

CVE-2026-39987

GitHubnxploited/cve-2026-39987

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability

exploitationinformation-gatheringpenetration-testing+4
4 months ago
metasploit-framework-nu11secur1ty preview

metasploit-framework-nu11secur1ty

GitHubnu11secur1ty/metasploit-framework-nu11secur1ty

Extending of metasploit-framework

command-and-controlexploitationexploit-frameworks+9
110 months ago
wordpress-CVE-2024-10924--exploit preview

wordpress-CVE-2024-10924--exploit

GitHubmaleeshaudan/wordpress-cve-2024-10924--exploit

WordPress CVE-2024-10924 Exploit for Really Simple Security plugin

authentication-authorizationexploitationpenetration-testing+3
11 year ago
CVE-2021-21389 preview

CVE-2021-21389

GitHubhoangkien1020/cve-2021-21389

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a…

exploitationpenetration-testingprivilege-escalation+3
195 years ago
CVE-2024-10793 preview

CVE-2024-10793

GitHubmahajian/cve-2024-10793
exploitationpayload-developmentprivilege-escalation+3
21 year ago
CVE-2021-44852 preview

CVE-2021-44852

GitHubcrackercat/cve-2021-44852

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and…

binary-exploitationexploitationhardware-security+3
23 years ago
CVE-2019-1388 preview

CVE-2019-1388

GitHubnobodyatall648/cve-2019-1388

CVE-2019-1388 Abuse UAC Windows Certificate Dialog

exploitationpenetration-testingprivilege-escalation+1
205 years ago
CVE-2016-2067 preview

CVE-2016-2067

GitHubhhj4ck/cve-2016-2067
android-securitybinary-exploitationexploitation+5
74 years ago
CVE-2024-49138-POC preview

CVE-2024-49138-POC

GitHubbananoname/cve-2024-49138-poc
binary-exploitationexploitationprivilege-escalation+1
1 year ago
CVE-2024-34831 preview

CVE-2024-34831

GitHubenzored/cve-2024-34831

Disclosure of CVE-2024-34831

educationexploitationpenetration-testing+3
1 year ago
DuplexSpyCS preview

DuplexSpyCS

GitHubiss4cf0ng/duplexspycs

An open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…

command-and-controleducationpayload-development+5
2185 months ago
DracOS preview

DracOS

GitHubscreetsec/dracos

Dracos Linux ( www.dracos-linux.org ) is the Linux operating system from Indonesian

educationexploitationforensics+8
589 years ago
Dejavu preview

Dejavu

GitHubbhdresh/dejavu

DejaVU - Open Source Deception Framework

cloud-securitydefensive-toolsids-ips-evasion+7
4321 year ago
Previous12Next