Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

75 results

relay_bible

rootsecdev/relay_bible

Technical Reference to multiple relay techniques

authenticationcurated-resourceseducation+8

193

3 months ago

SEPM-EoP

dimopouloselias/sepm-eop

CVE-2018-18368 SEP Manager EoP Exploit

binary-exploitationexploitationpenetration-testing+2

176 years ago

CVE-2025-2304-POC

d3vn0mi/cve-2025-2304-poc

Proof-of-concept for CVE-2025-2304 — critical (CVSS 9.4) mass-assignment privilege escalation in Camaleon CMS.

educationexploitationpayload-generation+4

103 months ago

CVE-2026-3629

pysectools/cve-2026-3629

WordPress Privilege Escalation Checker

exploitationpenetration-testingprivilege-escalation+3

93 months ago

CVE-2026-53625-GLPI-PoC

7h30th3r0n3/cve-2026-53625-glpi-poc

GLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full…

api-security-testingauthentication-authorizationexploitation+4

19 days ago

CVE-2026-15964-PoC

instructor-admin/cve-2026-15964-poc

PoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8)

authentication-authorizationexploitationinformation-gathering+5

119 days ago

CVE-2025-42957-SAP-S-4HANA-Under-Siege

mrk336/cve-2025-42957-sap-s-4hana-under-siege

CVE‑2025‑42957 exposes an RFC‑enabled SAP S/4HANA module that lets low‑privileged users inject ABAP code to create admin accounts and gain full…

educationexploitationpenetration-testing+4

311 months ago

CVE-2025-6254

yucaerin/cve-2025-6254

CVE-2025-6254 — Doctreat Core <= 1.6.8 — Unauthenticated Privilege Escalation

ctfeducationexploitation+8

2 months ago

CVE-2026-8181

ez4rd1x1/cve-2026-8181

Proof-of-concept exploit for CVE-2026-8181, an authentication bypass in the Burst Statistics WordPress plugin. Demonstrates remote, unauthenticated…

authentication-authorizationctfeducation+5

2 months ago

CVE-2026-6741

xxconi/cve-2026-6741

CVE-2026-6741 is a CVSS 8.8 (High) Authenticated (Agent+) Privilege Escalation vulnerability in the LatePoint – Calendar Booking Plugin

ctfeducationexploitation+4

2 months ago

CVE-2020-9758

ari034/cve-2020-9758

Form submission for vulnerability in livezilla

exploitationinformation-gatheringpenetration-testing+3

36 years ago

CVE-2026-23550

1beelze/cve-2026-23550

educationexploitationpenetration-testing+3

1 month ago

CVE-2026-0920-

nxploited/cve-2026-0920-

LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole…

educationexploitationprivilege-escalation+3

24 months ago

NextJS-RCE-Root-Takeover

imad457/nextjs-rce-root-takeover

Pentest Report: Next.js 16.0.6 RCE (CVE-2025-66478)

educationexploitationlabs-practice+4

26 months ago

CVE-2024-10793

mahajian/cve-2024-10793

exploitationpayload-developmentprivilege-escalation+3

21 year ago

CVE-2025-24000-exploit

bsdrip/cve-2025-24000-exploit

Short Python script for exploiting CVE-2025–24000 based on this blog post: https://medium.com/@security_56355/from-subscriber-to-admin-reproducing-cve…

educationexploitationpenetration-testing+3

4 months ago

CVE-2025-15602-PoC

nxvh1337/cve-2025-15602-poc

Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

authenticationexploitationinformation-gathering+4

4 months ago

CVE-2023-33730

sahiloj/cve-2023-33730

eScan Management Console version 14.0.1400.2281 contains privilege escalation via `GetUserCurrentPwd` function lets attackers retrieve any user's…

authentication-authorizationeducationexploitation+8

16 months ago

Previous 1 234 5 Next