Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

833 results

CVE-2019-12890_RedxploitHQ

ethicalhcop/cve-2019-12890_redxploithq

Use RedxploitHQ to create a new Admin user into redwoodhq and get all the functions on the framework

exploitationpenetration-testingprivilege-escalation+2

6 years ago

CVE-2022-39196-

dayiliwaseem/cve-2022-39196-

Black board CMS Escalation of Privileges

data-exfiltrationexploitationinformation-gathering+3

3 years ago

CVE-2018-5354

missing0x00/cve-2018-5354

CVE-2018-5354

exploitationpenetration-testingprivilege-escalation+3

5 years ago

CVE_Project

mhe18/cve_project

CVE-2016-1240 exploit and patch

binary-exploitationexploitationprivilege-escalation+2

7 years ago

CVE-2024-57429

ahrixia/cve-2024-57429

CVE-2024-57429: PHPJabbers Cinema Booking System v2.0 is vulnerable to CSRF, allowing attackers to escalate privileges by forging requests on behalf…

exploitationpenetration-testingprivilege-escalation+3

1 year ago

CVE-2024-57778

kuk3n4n/cve-2024-57778

An issue in Orbe ONetView Roteador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status…

exploitationiot-securitypenetration-testing+3

1 year ago

CVE-2021-42562

mbadanoiu/cve-2021-42562

CVE-2021-42562: Improper Access Control in MITRE Caldera

exploitationmisconfigurationpenetration-testing+3

2 years ago

CVE-2025-25616

armaansidana2003/cve-2025-25616

Proof-of-concept demonstrating incorrect access control in Unifiedtransform v2.0, allowing students to modify exam rules via the /exams/edit-rule…

exploitationmisconfigurationpenetration-testing+3

1 year ago

Event-ID-189-Rule-Name-SOC227-CVE-2023-29357

ahmedmansour93/event-id-189-rule-name-soc227-cve-2023-29357

Event ID 189 Rule Name SOC227 Microsoft SharePoint Server Elevation of Privilege Possible CVE-2023-29357 .. Exploitation

exploitationpenetration-testingprivilege-escalation+2

1 year ago

CVE-2025-24990_POC

moiz-2x/cve-2025-24990_poc

Proof of Concept CVE-2025-24990 (Agere Systems's driver)

binary-exploitationexploitationexploit-frameworks+2

5910 months ago

CVE-2026-4112

hann1bl3l3ct3r/cve-2026-4112

Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote…

exploitationpenetration-testingprivilege-escalation+2

14 months ago

CVE-2026-1492-POC

medlemark-dz/cve-2026-1492-poc

User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

exploitationpenetration-testingprivilege-escalation+2

5 months ago

CVE-2026-31431-Patch

xsanflip/cve-2026-31431-patch

Bash script to mitigate and patch CVE-2026-31431 (Copy Fail), a Linux kernel LPE, by blacklisting AF_ALG modules, flushing page cache, and updating…

configuration-auditingprivilege-escalationvulnerability-analysis

33 months ago

EpSiLoNPoInT-

epsilonpoint88-glitch/epsilonpoint-

Modular exploit framework targeting CVE-2026-23550 in WordPress, featuring mass exploitation, obfuscation, post-exploitation, and Docker-based C2…

command-and-controlexploitationpayload-development+7

16 months ago

Archived

Vulmap

vulmon/vulmap

Vulmap Online Local Vulnerability Scanners Project

exploitationinformation-gatheringpenetration-testing+4

9783 years ago

Archived

CVE-2022-38577-Processmaker

sornram9254/cve-2022-38577-processmaker

ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate…

exploitationexploit-frameworkspenetration-testing+3

31 year ago

DarkWidow

reveng007/darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a…

binary-analysiseducationexploitation+6

8077 months ago

CVE-2026-41091-PoC-Exploit

tc4dy/cve-2026-41091-poc-exploit

CVE-2026-41091 RedSun | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via Cloud Files API + NTFS junction…

binary-exploitationeducationexploitation+4

31 month ago

Previous 1…394041…47 Next