Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

451 results

-Ruby-dl-handle.c-CVE-2009-5147-

zhangyongbo100/-ruby-dl-handle.c-cve-2009-5147-

Community-maintained database of Ruby gem security advisories with structured CVE data, CVSS scores, and patched version requirements. Integrates…

code-analysiscurated-resourceseducation+3

7 years ago

xz-cve-2024-3094

hackura/xz-cve-2024-3094

Python demo simulating CVE-2024-3094: a supply chain backdoor in XZ Utils with a trigger-based stealth activation.

digital-forensicseducationforensics+6

7 months ago

cve-2022-42889-jmeter

qainsights/cve-2022-42889-jmeter

Script to handle CVE 2022-42889

general-purpose-utilitiesscripting-automationsupply-chain-security+1

73 years ago

log4j-test

strawhatasif/log4j-test

Demonstration of CVE-2021-44228 with a possible strategic fix.

educationexploitationsupply-chain-security+2

4 years ago

React19-fix-vibecoders

ivaavimusic/react19-fix-vibecoders

CVE-2025-55182 Fix for Vibe Coders

curated-resourceseducationscripting-automation+3

19 months ago

vulns-2026-fatfs-chance

runzeroinc/vulns-2026-fatfs-chance

Documented security vulnerabilities in the FatFs embedded filesystem library with CVE details, fuzzing harness, exploit disk-image generator, and…

binary-analysiseducationembedded-systems-security+8

411 month ago

CVE-2025-12543-Fix-for-Wildfly

kavin71725/cve-2025-12543-fix-for-wildfly

Docker base image with backported Host header validation fix for CVE-2025-12543 in Undertow 1.4.x, enabling secure deployment of WildFly 11…

cloud-infrastructure-securitycontainer-securitydevsecops+4

5 months ago

AWS-SAM-CLI-Vulnerabilities

murataydemir/aws-sam-cli-vulnerabilities

Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)

cloud-securitycontainer-securitydevsecops+3

1 year ago

scan-cve-2018-8115

aquasecurity/scan-cve-2018-8115

CLI tool that verifies Docker images for CVE-2018-8115 by checking layers for malicious files, helping ensure safe pulls from Docker Hub.

container-securitymisconfigurationstatic-analysis+2

78 years ago

Linux---Security---Detect-and-Mitigate-CVE-2024-3094

laxmikumari615/linux---security---detect-and-mitigate-cve-2024-3094

It was determined that malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. # It was determined that only…

educationincident-responsesupply-chain-security+2

1 year ago

ClearML-CVE-2024-24590

oxydev2/clearml-cve-2024-24590

Proof of concept for CVE-2024-24590

ai-securityexploitationpayload-generation+3

62 years ago

srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

shoucheng3/srikanth-lingala__zip4j_cve-2018-1002202_1-3-2

Decompiled source code of zip4j library versions 1.3.2 (vulnerable) and 1.3.3 (fixed) for CVE-2018-1002202 path traversal analysis, part of the…

code-analysiscurated-resourceseducation+3

1 year ago

CVE-2007-4559

davidholiday/cve-2007-4559

Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…

code-analysiseducationexploitation+3

2 years ago

CVE-2021-44228-Log4Shell-Hashes

mubix/cve-2021-44228-log4shell-hashes

Hashes for vulnerable LOG4J versions

forensicsincident-responseioc-management+3

1554 years ago

Reports

j4ck3lsyn-gen2/reports

Curated collection of cybersecurity research reports covering CVE analysis, exploit research, threat intelligence, and offensive security from…

binary-exploitationcurated-resourcesexploitation+8

21 month ago

CVE-2025-48384

acheong08/cve-2025-48384

Breaking git with a carriage return and cloning RCE

code-analysiseducationexploitation+2

531 year ago

linux-root-kit

ic3-512/linux-root-kit

End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full…

command-and-controldigital-forensicseducation+8

101 year ago

jackson

sassoftware/jackson

This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…

code-analysisgeneral-purpose-utilitiesstatic-analysis+2

14 months ago

Previous12…26 Next