Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

834 results

CVE-2025-46203

spbavarva/cve-2025-46203

PoC of CVE-2025-46203

exploitationmisconfigurationpenetration-testing+3

1 year ago

cve-2023-20198-poc-cisco

djayagit/cve-2023-20198-poc-cisco

CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。

exploitationpenetration-testingprivilege-escalation+3

11 year ago

CVE-2025-5701

randomrobbiebf/cve-2025-5701

HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update

exploitationmisconfigurationpenetration-testing+3

11 year ago

PS-CVE-2021-21551

arnaudluti/ps-cve-2021-21551

Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools…

configuration-auditingexploitationincident-response+3

15 years ago

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

aakashtyal/session-persistence-after-enabling-2fa-cve-2025-60425

Detailed vulnerability report on Nagios Fusion session persistence after enabling 2FA, including CVE-2025-60425, affected versions, mitigation…

authenticationexploitationpenetration-testing+3

10 months ago

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

mrk336/cluster-chaos-exploiting-cve-2025-59359-for-kubernetes-takeover

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters…

cloud-securitycommand-and-controlcontainer-security+8

11 months ago

CVE-2025-31161

dairrow/cve-2025-31161

PoC Authentication Bypass to RCE to Exploit CVE-2025-31161

authenticationexploitationpayload-development+5

17 months ago

CVE-2023-3460

emadyay/cve-2023-3460

CVE-2023-3460

authenticationexploitationpenetration-testing+3

3 years ago

exploit_cve-2007-2447_again

mrroma577/exploit_cve-2007-2447_again

just remeber how small mistake in santisize username could give yoy root access to the full machine

exploitationpenetration-testingprivilege-escalation+2

1 year ago

CVE-2026-39987

nxploited/cve-2026-39987

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability

exploitationinformation-gatheringpenetration-testing+4

4 months ago

CVE-2025-55287-POC

eternalvalhalla/cve-2025-55287-poc

Authenticated stored XSS priv esc PoC. Affects Genealogy versions prior to 4.4.0

exploitationpenetration-testingprivilege-escalation+3

11 year ago

cve-2023-22515

intfinityconsulting/cve-2023-22515

Confluence broken access control to code execution

exploitationpenetration-testingprivilege-escalation+3

2 years ago

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

sanupl/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations

CVE-2021-46075 - A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access…

exploitationmisconfigurationpenetration-testing+3

3 months ago

CVE-2025-4606

yucaerin/cve-2025-4606

Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

exploitationpassword-attacksprivilege-escalation+3

1 year ago

CiscoISE-CVE-2025-20282-POC

skadevare/ciscoise-cve-2025-20282-poc

Proof of concept of CVE-2025-20282, the perfect 10.

exploitationpenetration-testingprivilege-escalation+3

10 months ago

Blackash-CVE-2025-41115

rockmelodies/blackash-cve-2025-41115

CVE-2025-41115

authenticationcloud-securityexploitation+5

9 months ago

CVE-2024-30973

athos-zago/cve-2024-30973

POC VIDEO - https://youtu.be/hNzmkJj-ImM?si=NF0yoSL578rNy7wN

exploitationiot-securitymisconfiguration+3

2 years ago

CVE-2024-50475

randomrobbiebf/cve-2024-50475

Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update

exploitationmisconfigurationpenetration-testing+3

1 year ago

Previous 1…373839…47 Next