Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

452 results

react2shell-audit

hamm0nz/react2shell-audit

A lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.

code-analysisdevsecopseducation+3

9 months ago

Tarmageddon-CVE-2025-62518-

airineiandrei/tarmageddon-cve-2025-62518-

PoC for CVE-2025-62518 demonstrating tar archive smuggling via tokio-tar PAX header parsing, creating malicious payloads and a vulnerable extractor…

educationexploitationmalware-analysis+3

7 months ago

CVE-2024-21533-PoC-ggit

lirantal/cve-2024-21533-poc-ggit

Proof-of-concept exploit for CVE-2024-21533, an argument injection vulnerability in the ggit npm package that allows arbitrary command execution via…

code-analysisexploitationsupply-chain-security+2

3 months ago

boot-jackson-cve

ghillert/boot-jackson-cve

Reproduction of CVE-2020-36518 in Spring Boot 2.5.10

code-analysisdevsecopseducation+3

4 years ago

CVE-2024-3094

dah4k/cve-2024-3094

Proof-of-concept and analysis tools for CVE-2024-3094, the XZ Utils backdoor vulnerability, including detection and exploitation scripts.

binary-analysisexploitationmalware-analysis+2

2 years ago

webpack-cve-2024-43788

batzionb/webpack-cve-2024-43788

Analyzes and demonstrates the webpack CVE-2024-43788 vulnerability, providing detection and exploitation insights for security researchers.

code-analysisexploitationsupply-chain-security+2

1 year ago

external_zlib_AOSP10_r33_CVE-2018-25032

trinadh465/external_zlib_aosp10_r33_cve-2018-25032

Patch for zlib addressing CVE-2018-25032 in AOSP10 r33, providing a fix for the identified vulnerability.

binary-analysiscode-analysisexploitation+3

3 years ago

terrapod-PoC

squeeze440/terrapod-poc

PoC — missing authorization on the platform-wide GPG trust-anchor store in Terrapod (GHSA-6qrc-597p-mrp9, CVE-2026-87006, CVSS 6.5).

authentication-authorizationexploitationpapers-research+4

12 days ago

Archived

quasar-app-webpack-json5-vulnerability

giz-berlin/quasar-app-webpack-json5-vulnerability

Minimal reproduction of CVE-2022-46175 demonstrating a JSON5 prototype pollution vulnerability in Quasar webpack projects for security education and…

code-analysiseducationsupply-chain-security+2

3 years ago

Archived

CVE-2017-0248-Test

rubenmamo/cve-2017-0248-test

Sample project to test using Microsoft.CodeDom.Providers.DotNetCompilerPlatform 2.0.1 causing CVE-2017-0248

code-analysiseducationgeneral-purpose-utilities+2

7 years ago

sh4d0wup

kpcyrd/sh4d0wup

Signing-key abuse and update exploitation framework

command-and-controlexploitationpayload-development+3

1311 month ago

claude-code-backdoor

s0ld13rr/claude-code-backdoor

Backdooring Claude Code via hooks in settings.json. Authorized use only!

educationmalware-analysispenetration-testing+4

885 months ago

rtx-cve-2023-45779

metaredteam/rtx-cve-2023-45779

Proof-of-concept code for Android APEX key reuse vulnerability

android-securitybinary-analysisexploitation+3

1092 years ago

scopeblind-gateway

tomjwxf/scopeblind-gateway

Security gateway for MCP servers with per-tool policy enforcement, Ed25519-signed audit receipts, and shadow-mode logging. Supports Cedar, OPA, and…

ai-securityapi-securityauthentication-authorization+6

105 months ago

vexhub-crawler

aquasecurity/vexhub-crawler

Collect VEX documents and update VEX Hub

crawlerinformation-gatheringsupply-chain-security+3

710 months ago

ore-mal-pkg-inspector

rapticore/ore-mal-pkg-inspector

Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner

code-analysisdevsecopseducation+6

84 months ago

CVE-2014-4936

0x3a/cve-2014-4936

Repository for CVE-2014-4936 POC code.

exploitationpenetration-testingsupply-chain-security+2

711 years ago

Fix-CVE-2021-44228

alexandreheroux/fix-cve-2021-44228

Apply class remove process from ear/war/jar/zip archive, see https://logging.apache.org/log4j/2.x/

misconfigurationscripting-automationsupply-chain-security+2

64 years ago

Previous 1…161718…26 Next