Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

71 results

hacktricks

hacktricks-wiki/hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

ctfcurated-resourceseducation+11

12.2k

4h 35m ago

CVE-2026-65400

acheong08/cve-2026-65400

Apple MacOS Screen Sharing Arbitrary File read/write -> RCE

data-exfiltrationexploitationpenetration-testing+3

27 days ago

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

omribaso/sccm-cve-2026-47301-remote-code-execution-exploit

Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…

exploitationpayload-developmentpenetration-testing+3

9212 days ago

CVE-2026-41940-PoC-Exploit

tc4dy/cve-2026-41940-poc-exploit

🚀 CVE-2026-41940 cPanel/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy,…

authentication-authorizationcommand-and-controlexploitation+8

91 month ago

COPY-FAIL

toxy4ny/copy-fail

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is…

binary-exploitationcommand-and-controlexploitation+4

11 month ago

Linux-Kernel-Vulnerabilities-CVE-2026-23111

vrtlbob/linux-kernel-vulnerabilities-cve-2026-23111

High Severity LPE vulnerability in Linux Kernel, with a CVS score of 7.8. An inverted check from user enables a process inside the container to break…

container-escapeeducationexploitation+3

11 month ago

Nidhogg

idov31/nidhogg

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

command-and-controlpayload-developmentprivilege-escalation+1

2.5k2 months ago

SparstanBoogie

fuzzlove/sparstanboogie

Exploit chain utilizing directory traversal and iOS restore to overwrite protected files.

educationexploitationios-security+4

33 months ago

RootRemover

st4rburn/rootremover

Temporarily removes the root password using CVE-2026-31431

exploitationpenetration-testingpost-exploitation+3

23 months ago

public-passwd

st4rburn/public-passwd

Use CVE-2026-46333 and CVE-2026-31431 to change any user's password.

authenticationauthentication-authorizationbinary-exploitation+5

23 months ago

CVE-2026-31431

361way/cve-2026-31431

Exploit for CVE-2026-31431 that escalates privileges to root, with a detection mode and C implementation for portability.

exploitationexploit-frameworkspenetration-testing+2

3 months ago

krbrelayx

dirkjanm/krbrelayx

Kerberos relaying and unconstrained delegation abuse toolkit

authenticationexploitationlateral-movement+3

1.7k5 months ago

swarmer

praetorian-inc/swarmer

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

persistence-mechanismspost-exploitationprivilege-escalation+1

1797 months ago

CVE-2024-32444

rxerium/cve-2024-32444

An unauthenticated privilege escalation problem tracked as CVE-2024-32444 (CVSS score: 9.8).

exploitationpenetration-testingprivilege-escalation+3

110 months ago

CVE-2025-4404-POC

im10n/cve-2025-4404-poc

POC for CVE-2025-4404

authenticationexploitationpenetration-testing+2

61 year ago

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

adityabhatt3010/sudo-privilege-escalation-linux-cve-2025-32463-and-cve-2025-32462

A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major Linux…

curated-resourceseducationexploitation+3

111 year ago

CVE-2021-34527

ausk1ll9/cve-2021-34527

CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare."

exploitationpayload-developmentpenetration-testing+3

1 year ago

Cisco-IOS-XE-CVE-2023-20198

g4sul1n/cisco-ios-xe-cve-2023-20198

Exploit PoC for CVE-2023-20198

command-and-controlexploitationpenetration-testing+3

31 year ago

Previous12 3 4 Next