Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

66 results

Magisk

topjohnwu/magisk

Android customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…

android-securitymobile-securityprivilege-escalation

63.0k4 days ago

ghostlock-app

yukonga/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

android-securitybinary-analysisexploitation+4

1.1k4 days ago

CVE-2026-42978-PoC-Research

coactionbrittlemaidenhair51/cve-2026-42978-poc-research

Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite.

defensive-toolsexploitationprivilege-escalation+2

6 days ago

CVE-2026-54121-Certighost

zerodayevil/cve-2026-54121-certighost

Proof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…

authenticationexploitationimpersonation-tools+6

8316 days ago

CVE-2026-42978-PoC-Research

syntaxmethod/cve-2026-42978-poc-research

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module…

defensive-toolseducationexploitation+5

9416 days ago

CVE-2025-57819

r3vpwnx/cve-2025-57819

Unauthenticated SQL injection to RCE exploit for FreePBX 16 Endpoint Manager (CVE-2025-57819). Demonstrates stacked queries to write a webshell via…

exploitationpenetration-testingprivilege-escalation+2

21 days ago

F9360-CVE43499

e-r-butch/f9360-cve43499

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko.…

android-securitybinary-exploitationeducation+5

427 days ago

GhostLock-H80GT

yakidango-official/ghostlock-h80gt

Honor 80 GT privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading

android-securitybinary-exploitationexploitation+2

1728 days ago

Metasploit-CVE-2026-54121-Certighost

nafiez/metasploit-cve-2026-54121-certighost

A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase"…

exploitationexploit-frameworkspenetration-testing+3

41 month ago

PurplePanda

carlospolop/purplepanda

Identify privilege escalation paths within and across different clouds

cloud-securityinformation-gatheringpenetration-testing+3

7202 months ago

Advanced-Loader-Reverse-Engineering

kaandemir993/advanced-loader-reverse-engineering

"In-depth reverse engineering analysis of an advanced multi-phase loader targeting Shellhost.exe, amsi.dll, mstscax.dll, and clbcatq.dll using module…

binary-analysiscode-analysiseducation+8

142 months ago

gluegate

sbousseaden/gluegate

Memory API proxy via signed mozglue.dll

defensive-toolsids-ips-evasionmemory-forensics+2

403 months ago

cve-2026-11837-ansible-posix-authorized-key

m8seven/cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of…

code-analysisconfiguration-auditingdevsecops+3

13 months ago

CVE-2025-57819-FreePBX-RCE2Root

ozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4

23 months ago

FreePBX-CVE-2025-57819

yuvrajshad/freepbx-cve-2025-57819

Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819

command-and-controlexploitationpayload-development+5

13 months ago

CVE-2026-31431

ryan2929/cve-2026-31431

Public exploit for a Linux kernel zero-day (CVE-2026-31431) enabling local privilege escalation to root on distributions since 2017. Includes a…

binary-exploitationexploitationpenetration-testing+3

4 months ago

cve-2026-31431-checker

gubiczap/cve-2026-31431-checker

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel…

configuration-auditingdevsecopsexploitation+5

4 months ago

copy-fail-CVE-2026-31431-detection-probe

ochebotar/copy-fail-cve-2026-31431-detection-probe

Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…

configuration-auditingcurated-resourcesdevsecops+7

104 months ago

Previous12 3 4 Next