Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1427 results

CVE-2026-23744-RCE

alisster00/cve-2026-23744-rce

This utility was created during research involving MCPJam v1.4.2. The application exposes an API endpoint that accepts a server configuration object.…

educationexploitationpenetration-testing+3

5 months ago

CVE-2023-4220

n1ghtfallxxx/cve-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution

educationexploitationpenetration-testing+3

12 years ago

exploit-CVE-2025-55182-poc

pa2sw0rd/exploit-cve-2025-55182-poc

This POC demonstrates CVE-2025-55182 using actual `[email protected]` vulnerable code.

code-analysiseducationexploitation+5

111 months ago

PoC-CVE-2025-62222

sadisticnight/poc-cve-2025-62222

Proof-of-concept demonstrating remote code execution via prompt injection in GitHub Copilot Chat, using a crafted Python file to trigger a…

command-and-controleducationexploit-frameworks+7

18 months ago

React2Shell-CVE-2025-55182

ihsansencan/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

container-escapeeducationexploitation+3

110 months ago

hackviser_labs_CVE-2015-3306

cybersensei-eh/hackviser_labs_cve-2015-3306

This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.

educationexploitationlabs-practice+3

11 year ago

log4j-vulnerability

marceloleite2604/log4j-vulnerability

Presents how to exploit CVE-2021-44228 vulnerability.

command-and-controleducationexploitation+5

14 years ago

CVE-2025-49132-Pterodactyl-Panel-RCE

thealchimist86/cve-2025-49132-pterodactyl-panel-rce

Exploit CVE-2025-49132 Pterodactyl Panel RCE

educationexploitationpenetration-testing+3

18 months ago

React2Shell-CVE-2025-55182

chitoz1300/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

container-escapeeducationexploitation+4

11 months ago

CVE-2025-3248

vip3rli0n/cve-2025-3248

Perform Remote Code Execution using vulnerable API endpoint.

educationexploitationpayload-generation+3

11 year ago

CVE-2017-7269

cappricio-securities/cve-2017-7269

Windows Server 2003 & IIS 6.0 - Remote Code Execution

educationexploitationpenetration-testing+3

12 years ago

CVE-2024-51378

rimbadirgantara/cve-2024-51378

Exploit cyberpanel version 2.3.6 - 2.3.7

educationexploitationpenetration-testing+3

11 months ago

log4shell

arabindadora/log4shell

Log4Shell (CVE-2021-44228) PoC

educationexploitationlabs-practice+4

1 year ago

SQLPad-6.10.0-Exploit-CVE-2022-0944

0xdtc/sqlpad-6.10.0-exploit-cve-2022-0944

Refurbish

educationexploitationpenetration-testing+3

1 year ago

exploit-CVE-2016-10033

zeeshanbhattined/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution

code-analysiseducationexploitation+5

4 years ago

Blackash-CVE-2025-47812

dkstar11q/blackash-cve-2025-47812

CVE-2025-47812

educationexploitationpayload-development+3

1 year ago

CVE-2014-6271-SHELLSHOCK

yunchohang/cve-2014-6271-shellshock

Automation script to exploit the Shellshock vulnerability.

command-and-controleducationexploitation+3

1 year ago

CVE-2019-18818_CVE-2019-19609

abelsrzz/cve-2019-18818_cve-2019-19609

This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609.

educationexploitationpassword-attacks+3

1 year ago

Previous 1…787980 Next