Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
124 results
Exploits_and_Advisories preview

Exploits_and_Advisories

GitHubrdomanski/exploits_and_advisories

Repository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.

curated-resourcesembedded-systems-securityexploitation+6
115
3 years ago
Exploits preview

Exploits

GitHubsadfud/exploits

Real world and CTFs exploiting web/binary POCs.

binary-exploitationctfexploitation+3
796 years ago
ICS-TestBed-Framework preview

ICS-TestBed-Framework

GitHubpmaynard/ics-testbed-framework

Deploys realistic virtual SCADA/ICS testbeds with IEC 60870-5-104 and OPC-UA nodes, enabling attack simulations, legitimate packet generation, and…

labs-practicenetwork-securitypacket-sniffing-analysis+3
707 years ago
bof preview

bof

GitHuborange-cyberdefense/bof

BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.

exploitationfuzzinginformation-gathering+6
533 years ago
UltraViolet preview

UltraViolet

GitHubyakushstanislav/ultraviolet

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

dns-analysisincident-responseiot-security+6
4417 days ago
Pwn2Own-Auto-2024-CHARX preview

Pwn2Own-Auto-2024-CHARX

GitHubret2/pwn2own-auto-2024-charx

Working exploit for Phoenix Contact CHARX SEC-3100 using Scapy raw Ethernet packets to trigger vulnerabilities and obtain an interactive connect-back…

embedded-systems-securityexploitationiot-security+2
142 years ago
Unauthenticated-RCE-FUXA-CVE-2023-33831 preview

Unauthenticated-RCE-FUXA-CVE-2023-33831

GitHubrodolfomarianocy/unauthenticated-rce-fuxa-cve-2023-33831

Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.

exploitationpayload-generationpenetration-testing+4
131 year ago
CVE-2022-29593 preview

CVE-2022-29593

GitHub9lyph/cve-2022-29593

Proof-of-concept exploit for authentication bypass via capture-replay in Dingtian DT-R002 relay, allowing unauthorized control of relays through HTTP…

authenticationexploitationfuzzing+8
81 year ago
CVE-2023-0861-POC preview

CVE-2023-0861-POC

GitHubseifallahhomrani1/cve-2023-0861-poc

Analyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers

educationembedded-systems-securityexploitation+5
73 years ago
detection-defense-library preview

detection-defense-library

GitLabwattocyber/detection-defense-library

Detection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…

cloud-securitycontainer-securitycurated-resources+7
15 days ago
cip-security-poc preview

cip-security-poc

GitHubpcrosby-1990/cip-security-poc

Proof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…

authenticationcryptographyincident-response+3
1 month ago
CVE-2026-9645-ScadaBR-Analysis preview

CVE-2026-9645-ScadaBR-Analysis

GitHub0xmhany/cve-2026-9645-scadabr-analysis

Technical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.

educationpapers-researchscada-ics-security+1
29 days ago
CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara preview

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

GitHubgainsec/cve-2017-16744-and-cve-2017-16748-tridium-niagara

Proof of Concept (PoC) for CVE: 2017-16744 and 2017-16748

exploitationpenetration-testingscada-ics-security+2
54 years ago
CVE-2015-5374-DoS-PoC preview

CVE-2015-5374-DoS-PoC

GitHubcan/cve-2015-5374-dos-poc

DoS exploit for CVE-2015-5374 targeting Siemens SIPROTEC 4 and Compact EN100 Ethernet modules via a crafted UDP packet to port 50000, with an…

exploitationexploit-frameworkspenetration-testing+2
38 years ago
CVE-2026-25938-FUXA-Unauthenticated-RCE preview

CVE-2026-25938-FUXA-Unauthenticated-RCE

GitHubjudgedbykira/cve-2026-25938-fuxa-unauthenticated-rce

An explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA

exploitationiot-securitypayload-development+6
125 days ago
CVE-2026-52134-libiec61850 preview

CVE-2026-52134-libiec61850

GitHubif-forget/cve-2026-52134-libiec61850

Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.

curated-resourceseducationlabs-practice+3
1 month ago
CVE-2025-69985 preview

CVE-2025-69985

GitHubjoshuavanderpoll/cve-2025-69985

Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…

authenticationexploitationremote-access-tool+3
36 months ago
Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP preview

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

GitHubmurataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmap

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)

educationinformation-gatheringnetwork-mapping+3
26 years ago
Previous1234567Next