Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

173 results

CVE-2022-41114

gmh5225/cve-2022-41114

Windows Bind Filter Driver Elevation of Privilege Vulnerability. CVE project by @Sn0wAlice

exploitationinformation-gatheringprivilege-escalation+1

3 years ago

CVE-2025-44823

skraft9/cve-2025-44823

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1

api-securityauthenticationexploitation+3

10 months ago

CVE-2026-39987

nxploited/cve-2026-39987

marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability

exploitationinformation-gatheringpenetration-testing+4

4 months ago

AutoPwn-Titanic.htb

maikneysm/autopwn-titanic.htb

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

ctfexploitationinformation-gathering+5

1 year ago

Harmonic

runik/harmonic

Suite for reverse shell handling geared toward working within the native shell

command-and-controlinformation-gatheringpayload-development+7

8 years ago

Windows-Exploit-Suggester-Python3

h3x0v3rl0rd/windows-exploit-suggester-python3

Python-based cross-referencing tool: uses Windows systeminfo and MS security bulletins to detect unpatched vulnerabilities and suggest privilege…

exploitationinformation-gatheringprivilege-escalation+1

1 year ago

CVE-2025-25968

padayali-jd/cve-2025-25968

Proof-of-concept exploit for CVE-2025-25968, an improper access control vulnerability in DDSN Interactive cm3 Acora CMS v10.1.1. Enables…

exploitationinformation-gatheringpenetration-testing+3

0 years ago

CVE-2017-7921-EXP

inj3ction/cve-2017-7921-exp

Exploit for CVE-2017-7921 targeting Hikvision devices with improper authentication. Retrieves user lists, camera snapshots, and configuration files…

exploitationinformation-gatheringiot-security+3

3 years ago

CVE-2022-39196-

dayiliwaseem/cve-2022-39196-

Black board CMS Escalation of Privileges

data-exfiltrationexploitationinformation-gathering+3

4 years ago

CVE-2024-37010

sarpantkeltiek/cve-2024-37010

Exploit for the CVE-2024-37010: access other user's external storage & lateral movement

data-exfiltrationexploitationinformation-gathering+5

1 year ago

CVE-2019-14287

h3x0v3rl0rd/cve-2019-14287

Shell script to detect CVE-2019-14287 sudo privilege escalation vulnerability. Scans systems for the flaw and reports affected configurations.

exploitationinformation-gatheringpenetration-testing+3

1 year ago

linux-exploit-suggester-2

h3x0v3rl0rd/linux-exploit-suggester-2

Post-exploitation utility that scans kernel/OS version and configuration to suggest applicable local privilege escalation exploits.

exploitationinformation-gatheringpenetration-testing+3

3 years ago

CVE-2024-52382

randomrobbiebf/cve-2024-52382

Matix Popup Builder <= 1.0.0 - Unauthenticated Arbitrary Options Update

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2021-44217

hyperkopite/cve-2021-44217

Proof-of-concept for a stored XSS vulnerability (CVE-2021-44217) in Ericsson CodeChecker's comments component, enabling cookie theft and sensitive…

data-exfiltrationinformation-gatheringprivilege-escalation+3

4 years ago

CVE-2020-24028

underprotection/cve-2020-24028

Proof-of-concept for CVE-2020-24028: authenticated privilege escalation via insecure permissions in ForLogic Qualiex v1 and v3, enabling user…

exploitationinformation-gatheringpenetration-testing+3

6 years ago

Lin_enum

h3x0v3rl0rd/lin_enum

Shell script for automated enumeration of Linux systems to identify privilege escalation vectors and configuration weaknesses.

information-gatheringpenetration-testingpost-exploitation+2

1 year ago

CVE-2024-57523.

hackwidmaddy/cve-2024-57523.

CVE-2024-57523 - CSRF Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2025-4162029

notitssixtyn3in/cve-2025-4162029

Security advisory detailing a critical authentication vulnerability (CVE-2025-4162029) in Copilot, enabling unauthorized account access via user ID…

authenticationexploitationinformation-gathering+3

1 year ago

Previous 1…8910 Next