Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

89 results

bouvet

vrn21-arcanist/bouvet

Sandbox for Agents

ai-securitycloud-securitycontainer-security+3

1028 months ago

kali-packer

kalilinux/build-scripts/kali-packer

Create and configure lightweight, reproducible, and portable development environments Kali's HashiCorp Packer configurations to create Kali…

general-purpose-utilitiespenetration-testingsecurity-virtualization

486 months ago

CVE-2026-81648

abraxas/cve-2026-81648

Proof-of-concept exploit and lab for CVE-2026-81648, an unauthenticated arbitrary file deletion flaw in the WordPress CryptoPayment Gateway plugin.

exploitationlabs-practicepenetration-testing+5

9 days ago

supernote-obsidian-plugin-PoC

squeeze440/supernote-obsidian-plugin-poc

PoC — path traversal via malicious device sync in the Supernote Obsidian plugin (GHSA-3gx3-r874-5pp4, CVE-2026-86999, CVSS 5.6).

exploitationpapers-researchpenetration-testing+3

29 days ago

CVE-2026-22599

abraxas/cve-2026-22599

Python PoC and Docker lab for CVE-2026-22599, an authenticated SQL injection in Strapi's Content-Type Builder write API via Knex raw defaultTo.

database-securityexploitationlabs-practice+5

13 days ago

CVE-2026-62062

abraxas/cve-2026-62062

Proof-of-concept and lab pack for CVE-2026-62062, an unauthenticated CSRF REST nonce bypass in Elementor 4.3.0-4.3.1 enabling administrator account…

exploitationlabs-practicepenetration-testing+4

19 days ago

CVE-2026-53365

horkimhab/cve-2026-53365

CVE-2026-53365

binary-exploitationcontainer-escapeeducation+4

1 month ago

CVE-2026-96512

abraxas/cve-2026-96512

Disclosure pack and PoC for CVE-2026-96512, a sudo NOTBEFORE/NOTAFTER TZ time-window bypass enabling local privilege escalation, with lab…

exploitationlabs-practicepenetration-testing+3

3 days ago

block-copyfail

mrunalp/block-copyfail

BPF LSM blocker for CVE-2026-31431 (Copy Fail) - zero-reboot remediation for OpenShift 4

cloud-securitycontainer-securitydefensive-tools+2

15 months ago

kali-linux-docker

nu11secur1ty/kali-linux-docker

kali-linux-docker

cloud-securitycontainer-securitydevsecops+8

16 years ago

webvm

axlan/webvm

Virtual Machine for the Web

cloud-securityctfeducation+3

9 months ago

external_libcap-Android10_r33_CVE-2023-2603

pazhanivelmani/external_libcap-android10_r33_cve-2023-2603

POSIX.1e capability library for Android 10, addressing CVE-2023-2603 with tools for setting and getting process capabilities to manage privilege…

android-securitybinary-analysisexploitation+3

1 year ago

SpeculativeExecutionAssessment

gregaskew/speculativeexecutionassessment

Assesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754

cloud-securityconfiguration-auditinghardware-security+3

6 years ago

cve-2024-32019-PoC

ayub0x7/cve-2024-32019-poc

Checks Netdata ndsudo SUID PATH privilege escalation exposure for CVE-2024-32019 and validates patches without weaponized exploitation.

defensive-toolsexploitationpenetration-testing+3

1 year ago

seclab-taskflows

githubsecuritylab/seclab-taskflows

Example AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…

ai-assisted-reversingai-securityandroid-security+8

8316 days ago

cve-2026-103956-loom-unauth

abraxas/cve-2026-103956-loom-unauth

CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured

authenticationcloud-securityexploitation+5

36 days ago

CVE-2026-15911-Confluent_Kafka

rahulreddykarne/cve-2026-15911-confluent_kafka

Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka

cloud-securitycryptographydefensive-tools+4

6 days ago

Previous 1 2 3 45Next