Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Feeds Contact Privacy© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

92 results

CVE-2018-6574 preview

CVE-2018-6574

devang-solanki/cve-2018-6574

Exploit for remote command execution in Golang go get command.

binary-exploitationexploitationpayload-development+3

1

4 years ago

seal-security-nuget-demo-net7 preview

seal-security-nuget-demo-net7

isecuritytw/seal-security-nuget-demo-net7

.NET 7 fork of seal-security-nuget-demo: same CVE-2024-21907 exploit story, retargeted for customers locked to .NET SDK 7.

curated-resourcesdevsecopseducation+2

4 months ago

scanner-for-CVE-2025-55182-vulnerability preview

scanner-for-CVE-2025-55182-vulnerability

shakilkhatri/scanner-for-cve-2025-55182-vulnerability

CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean…

code-analysisdevsecopssecret-detection+3

10 months ago

grype preview

grype

anchore/grype

A vulnerability scanner for container images and filesystems

container-escapecontainer-securitydevsecops+4

13.0k10h 35m ago

hijagger preview

hijagger

firefart/hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

dns-analysisosintreconnaissance+3

3085h 20m ago

grepmarx preview

grepmarx

orange-cyberdefense/grepmarx

A source code static analysis platform for AppSec enthusiasts.

code-analysisdevsecopsstatic-analysis+3

2797 months ago

sbomlyze preview

sbomlyze

rezmoss/sbomlyze

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

configuration-auditingdevsecopssecret-detection+5

267 days ago

Package-Inferno preview

Package-Inferno

mhaggis/package-inferno

A Public Package Scanner for The Community

cloud-securitycontainer-securitydevsecops+6

128 months ago

CVE-2026-63720-datamodel-code-generator preview

CVE-2026-63720-datamodel-code-generator

rahulreddykarne/cve-2026-63720-datamodel-code-generator

Code injection (RCE) in datamodel-code-generator via unvalidated customBasePath (CVE-2026-63720)

educationexploitationpayload-development+2

2 months ago

skill-scanner preview

skill-scanner

cisco-ai-defense/skill-scanner

Security Scanner for Agent Skills

ai-securitycode-analysisdevsecops+9

2.6k3 days ago

VulnReach preview

VulnReach

owasp/vulnreach

Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.

code-analysisdevsecopsdynamic-analysis-sandboxing+5

164 days ago

CVE-2026-4660-PoC preview

CVE-2026-4660-PoC

gouldnicholas/cve-2026-4660-poc

PoC for CVE-2026-4660: arbitrary file read via git checkout in hashicorp/go-getter

cloud-securitydevsecopsexploitation+3

16 months ago

log4j-scanner preview

log4j-scanner

bjliyanliang/log4j-scanner

Log4j 2 (CVE-2021-44228) vulnerability scanner for Windows OS

exploitationincident-responsesupply-chain-security+2

4 years ago

titus preview

titus

praetorian-inc/titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

code-analysiscontainer-securitydevsecops+6

7091 day ago

go-dbmigrate preview

go-dbmigrate

moisei-dev/go-dbmigrate

Go library and CLI for managing database schema migrations with support for PostgreSQL, MySQL, SQLite, and Cassandra, including up/down migration…

configuration-auditingdatabase-securitydevsecops+2

5 months ago

goIssue_dunfell preview

goIssue_dunfell

skulkarni-mv/goissue_dunfell

go CVE-2023-24538 patch issue resolver - Dunfell

code-analysisdevsecopssupply-chain-security+1

3 years ago

goIssue_kirkstone preview

goIssue_kirkstone

skulkarni-mv/goissue_kirkstone

go CVE-2023-24538 patch issue resolver - Kirkstone

code-analysisdevsecopssupply-chain-security+1

3 years ago

trivy preview

trivy

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-infrastructure-securitycloud-securitycode-analysis+14

38.3k1 day ago

Previous 1 234 5 6 Next