Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

21 results

JavaSecLab

whgojp/javaseclab

Comprehensive Java vulnerability lab with vulnerable and fixed code, attack scenarios, source/sink audit notes, and secure coding guidance for…

code-analysisctfdevsecops+6

881

3 months ago

CVE-2024-57521-RuoYi-SQLi

xs2024770/cve-2024-57521-ruoyi-sqli

Static code audit of CVE-2024-57521, an authenticated SQL injection in RuoYi-Vue's generator module, with source-to-sink analysis and a %0b filter…

educationexploitationpapers-research+4

8 days ago

shiro

sassoftware/shiro

CVE-2026-49268 — Analysis and Remediation of an LDAP Injection Authentication Bypass Vulnerability

authenticationcode-analysiseducation+3

119 days ago

log4shell-CVE-2021-44228

rh-rahulshetty/log4shell-cve-2021-44228

Deliberately vulnerable Java/Maven fixture for testing Log4Shell (CVE-2021-44228) detection, code-impact classification, and remediation guidance in…

code-analysisdevsecopseducation+4

14 days ago

nullorigin

rakib-nyc/nullorigin

Research-only AI watermark robustness toolkit: local reverse proxy strips C2PA/EXIF/XMP, Unicode, image/audio stego, OOXML/PDF metadata, and scans…

adversarial-attackai-securityeducation+4

41 month ago

lightweight_static_analysis

nccgroup/lightweight_static_analysis

Create useful, lightweight static analyses using open source tools + a tiny bit of your code

code-analysiseducationpenetration-testing+4

136 years ago

CVE-2026-32722

0xmrma/cve-2026-32722

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

educationpapers-researchpenetration-testing+3

15 months ago

exploit-CVE-2016-10033

opsxcq/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

code-analysiseducationexploitation+6

4076 years ago

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

patrickdeanramos/cve-2024-41302-bookea-tu-mesa-is-vulnerable-to-sql-injection

Bookea-tu-Mesa is vulnerable to SQL Injection

code-analysiseducationstatic-code-analysis+3

2 years ago

jstachio__jstachio_CVE-2023-33962_1-0-0

shoucheng3/jstachio__jstachio_cve-2023-33962_1-0-0

Type-safe Java Mustache templating engine with compile-time template validation, static value binding, and extensible escaping for HTML and other…

code-analysiseducationgeneral-purpose-utilities+2

1 year ago

SyncShield

waleedadam360-web/syncshield

SyncShield - Browser Extension to Detect Unsafe Rsync Commands (CVE-2018-5764)

educationmisconfigurationscripting-automation+3

10 months ago

SealSecurity_Exam

m-lito13/sealsecurity_exam

Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package

code-analysiseducationstatic-code-analysis+2

2 years ago

CVE-2026-39259

yousif-iq/cve-2026-39259

CVE-2026-39259

binary-analysiseducationembedded-systems-security+3

23 months ago

CVE-2023-31606

merbinr/cve-2023-31606

Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…

educationpapers-researchstatic-code-analysis+2

23 years ago

CVE-2021-44228

tai-e/cve-2021-44228

Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability

code-analysiseducationstatic-code-analysis+1

93 months ago

CVE-2026-48813-POC

7alen7/cve-2026-48813-poc

Proof-of-concept exploit for terminal escape sequence injection via malicious filenames that hides Flawfinder's scan findings; fixed in version…

educationexploitationpapers-research+2

14 months ago

ASST

owasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

code-analysiseducationstatic-code-analysis+2

1881 year ago

sast-rules

gitlab-org/security-products/sast-rules

Curated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…

code-analysisdevsecopseducation+2

307 days ago

Previous12 Next