Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

374 results

samsung_tizen_tv_root

commit-regrets/samsung_tizen_tv_root

Research toolkit that roots a Samsung Tizen 9 TV via a Chromium WasmGC RCE and V4L2 physmap arbitrary physical memory access, with persistent on-boot…

binary-exploitationembedded-systems-securityexploitation+8

1 day ago

CoercedPotato

prepouce/coercedpotato

Windows local privilege escalation tool that abuses SeImpersonatePrivilege via MS-RPRN and MS-EFSR RPC coercion to execute commands as SYSTEM.

exploitationpayload-developmentpenetration-testing+3

4022 months ago

FreePBX-SQLi-RCE

hexbytee/freepbx-sqli-rce

Python proof-of-concept exploiting CVE-2025-57819, an unauthenticated SQL injection in FreePBX that chains admin creation, cron webshell deployment,…

exploitationpayload-developmentpenetration-testing+4

14 months ago

CouchPotato

ripits-sec/couchpotato

Windows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts…

defensive-toolsexploitationpayload-development+3

1211 month ago

QuickAssist_UAC_Bypass

r41n3rzuf477/quickassist_uac_bypass

UAC bypass PoC abusing the UIAccess QuickAssist binary to load an attacker-controlled DLL via WebView2 BrowserExecutableFolder, then hijack elevated…

defensive-toolsexploitationpayload-development+4

2443 months ago

copyFail30

slaptat/copyfail30

copyFail for python pre 3.10, without os.splice()

exploitationpayload-developmentprivilege-escalation+1

475 months ago

adm-zip_LPE-PoC

x86byte/adm-zip_lpe-poc

CVE-2026-102282: Local Privilege Escalation via SUID/SGID preservation during archive extraction

exploitationpayload-developmentprivilege-escalation+4

1228 days ago

CVE-2026-15989

fl0ydsec/cve-2026-15989

Mass scanner and exploit for CVE-2026-15989, the unauthenticated privilege escalation in Super Forms <= 6.3.316 that creates administrator accounts…

exploitationpayload-generationpenetration-testing+6

25 days ago

ps-ppl-bypass

r41n3rzuf477/ps-ppl-bypass

Process Explorer vulnerable driver PPL Bypass

binary-exploitationdefensive-toolsexploitation+5

2728 days ago

CVE-2026-34990-poc

dennisdgr/cve-2026-34990-poc

LPE PoC for CVE-2026-34990 using a CUPS root file write vulnerability.

exploitationpayload-developmentpenetration-testing+2

21 month ago

CVE-2026-34990

gbuyssens/cve-2026-34990

Local privilege escalation against a root `cupsd`.

exploitationpayload-developmentpenetration-testing+3

1 month ago

CVE-2026-34990-poc

khush-613/cve-2026-34990-poc

Proof-of-concept exploit for CVE-2026-34990, a CUPS 2.4.16 local privilege escalation via arbitrary file write through CUPS_CREATE_LOCAL_PRINTER and…

exploitationpayload-developmentpenetration-testing+4

21 month ago

cups-2.4.16-lpe

mrdebora/cups-2.4.16-lpe

CUPS 2.4.16 Local Privilege Escalation via Local Admin Token Leak and file:// Arbitrary File Write (CVE-2026-34990)

exploitationpayload-generationpenetration-testing+4

29 days ago

CVE-2026-63030

langz337/cve-2026-63030

Python exploit tool chaining CVE-2026-63030 REST batch-route confusion with CVE-2026-60137 SQL injection to achieve unauthenticated WordPress RCE,…

command-and-controlexploitationpayload-development+8

11 month ago

CVE-2025-7771

yulisec/cve-2025-7771

Full exploit chain for CVE-2025-7771 in ThrottleStop.sys, abusing unvalidated physical memory R/W IOCTLs to escalate from administrator to SYSTEM on…

binary-exploitationdefensive-toolsexploitation+5

11 month ago

MSRKit

rurixis/msrkit

A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.sys)

binary-exploitationexploitationpayload-development+5

671 month ago

CVE-2025-6325_CVE-2025-6327

johenlastgen-jlg/cve-2025-6325_cve-2025-6327

Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…

crawlerexploitationpayload-development+7

1 month ago

CVE-2024-30804

geozstevenzz/cve-2024-30804

Windows LPE PoC exploiting the AsInsHelp64.sys driver via arbitrary physical memory read/write to overwrite kernel tokens and gain SYSTEM privileges.

binary-exploitationexploitationpayload-development+3

10 months ago

Previous12…21 Next