Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
65 results
PowerTools preview

PowerTools

GitHubpowershellempire/powertools

Collection of offensive PowerShell projects for reconnaissance, privilege escalation, and post-exploitation during penetration testing engagements.

penetration-testingpost-exploitationprivilege-escalation+1
2.2k
9 years ago
CVE-2026-14281 preview

CVE-2026-14281

GitHubmurrez/cve-2026-14281

Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields →…

exploitationpenetration-testingprivilege-escalation+5
411 days ago
cve-2025-55182 preview

cve-2025-55182

GitHubchrisbarack/cve-2025-55182

Technical penetration testing writeup demonstrating exploitation of CVE-2025-55182 in Next.js, credential harvesting from SQLite, and privilege…

exploitationpenetration-testingprivilege-escalation+4
1 month ago
CVE-2025-40602 preview

CVE-2025-40602

GitHubcyberleelawat/cve-2025-40602

CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000…

exploitationpenetration-testingprivilege-escalation+3
19 months ago
megaquagga-pentest-report preview

megaquagga-pentest-report

GitHubreal-tim-johnston/megaquagga-pentest-report

Black box penetration test — WordPress exploitation, privilege escalation via CVE-2022-0847

exploitationpenetration-testingprivilege-escalation+3
7 months ago
CVE-2025-6758 preview

CVE-2025-6758

GitHubnxploited/cve-2025-6758

Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator

exploitationpenetration-testingprivilege-escalation+3
11 months ago
CVE-2019-14287- preview

CVE-2019-14287-

GitHubedsonjt81/cve-2019-14287-

Shell script to detect and exploit CVE-2019-14287 sudo privilege bypass vulnerability, with standalone or scanner-integrated enumeration mode.

exploitationpenetration-testingprivilege-escalation+2
5 years ago
linux-exploit-suggester preview

linux-exploit-suggester

GitHubh3x0v3rl0rd/linux-exploit-suggester

Linux kernel version checker that suggests known local privilege escalation exploits based on the system's kernel release.

exploitationpenetration-testingprivilege-escalation+2
4 years ago
CVE-2026-14281 preview

CVE-2026-14281

GitHublangz337/cve-2026-14281

Mass scanner and single-target exploit for CVE-2026-14281, an unauthenticated privilege escalation in the WordPress Automation Web Platform plugin…

exploitationpassword-attackspenetration-testing+6
110 days ago
weevely3 preview

weevely3

GitHubepinna/weevely3

Weaponized web shell

penetration-testingpost-exploitationprivilege-escalation+4
3.5k1 year ago
Get-RBCD-Threaded preview

Get-RBCD-Threaded

GitHubfatrodzianko/get-rbcd-threaded

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

penetration-testingprivilege-escalationreconnaissance+1
1345 years ago
noPac-detection preview

noPac-detection

GitHubcybersecurityworks553/nopac-detection

Detection script for CVE-2021-42278 and CVE-2021-42287

exploitationpenetration-testingprivilege-escalation+2
24 years ago
ADBloodHound-AI preview

ADBloodHound-AI

GitLabayinedjimi-consultants/adbloodhound-ai

AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI https://ayinedjimi-consultants.fr

ai-securityexploitationpenetration-testing+4
7 months ago
PurplePanda preview

PurplePanda

GitHubcarlospolop/purplepanda

Identify privilege escalation paths within and across different clouds

cloud-securityinformation-gatheringpenetration-testing+3
7202 months ago
JustTryHarder preview

JustTryHarder

GitHubsinfulz/justtryharder

Comprehensive penetration testing cheat sheet for PWK/OSCP exam preparation, covering privilege escalation, password cracking, payload generation,…

educationexploitationpassword-cracking+7
8393 months ago
RootHelper preview

RootHelper

GitHubnullarray/roothelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

exploitationinformation-gatheringpayload-generation+6
5045 years ago
RedGhost preview

RedGhost

GitHubd4rk007/redghost

Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no…

command-and-controllateral-movementpayload-generation+5
5415 years ago
cynative preview

cynative

GitHubcynative/cynative

Read-only AI agent that queries your cloud, code, and runtime infrastructure to surface misconfigurations, leaked secrets, and privilege escalation…

ai-securitycloud-securitycontainer-security+7
2183h 55m ago
Previous1234Next