Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

11860 results

vestacp-config-eval-rce

sysdopllc/vestacp-config-eval-rce

Security advisory: VestaCP <= 0.9.8-26 authenticated config-parser eval sinks -> root RCE (ancestor of HestiaCP GHSA-w3mx/cr7q, never disclosed for…

exploitationprivilege-escalationvulnerability-analysis+1

13 days ago

CVE-2026-80344

oscerd/cve-2026-80344

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

defensive-toolseducationexploitation+2

1 day ago

CVE-2026-85243

oscerd/cve-2026-85243

Runnable Spring Boot and Quarkus proof-of-concept for CVE-2026-85243, demonstrating the Apache Camel camel-crypto-pgp integrity-verification…

cryptographydefensive-toolseducation+4

1 day ago

CVE-2026-36213-poc

nt2dev/cve-2026-36213-poc

CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation

exploitationmisconfigurationpenetration-testing+2

1 month ago

CVE-2026-55781-poc

nt2dev/cve-2026-55781-poc

Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field.

exploitationfuzzingpapers-research+1

21 month ago

Vader-Pro-VDR

tridents10/vader-pro-vdr

AI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence…

ai-securitycloud-securityconfiguration-auditing+5

11 day ago

CVE-vulnerability

ife-ella/cve-vulnerability

Repository referencing CVE-2026-0322; no README, documentation, or code details are available to describe its contents or purpose.

exploitationpapers-researchvulnerability-analysis

5 days ago

openmeetings-backup-config-path

abraxas/openmeetings-backup-config-path

Apache OpenMeetings 9.1.0 - High - Remote - File write leftover - ADMIN_BACKUP import skips Path.of on Type.PATH

misconfigurationpapers-researchpenetration-testing+2

3 days ago

Flowise-RCE

k4m1diamond/flowise-rce

Proof-of-concept exploit code for CVE-2025-58434 and CVE-2025-59528, demonstrating remote code execution in Flowise.

exploitationpenetration-testingremote-access-trojan+2

6 months ago

openmeetings-cluster-openjpa

abraxas/openmeetings-cluster-openjpa

Apache OpenMeetings 9.1.0 - High - Remote - CWE-502 - clustering OpenJPA RemoteCommitProvider TCP 5636

exploitationlabs-practicevulnerability-analysis+1

3 days ago

openmeetings-nettest-ping-dos

abraxas/openmeetings-nettest-ping-dos

Apache OpenMeetings 9.1.0 - High - Remote - DoS leftover - unauth NetTest ping POST reads body to EOF

exploitationlabs-practicevulnerability-analysis+2

3 days ago

CVE-2026-79985

oscerd/cve-2026-79985

Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…

defensive-toolseducationexploitation+3

3 days ago

CVE-2026-79986

oscerd/cve-2026-79986

Reproducer and analysis for CVE-2026-79986, a path traversal in Apache Camel camel-azure-files where share listing names escape the polled directory.

cloud-securityeducationexploitation+3

3 days ago

pfsense-cp-filename-xss

abraxas/pfsense-cp-filename-xss

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - CP filename stored XSS

exploitationpenetration-testingvulnerability-analysis+2

4 days ago

CVE-2026-110912

0xblackash/cve-2026-110912

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

defensive-toolseducationexploitation+5

14 days ago

Analysis-And-POC-N8N-CVE-2025-68613

rianjuniorsf/analysis-and-poc-n8n-cve-2025-68613

Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive…

defensive-toolseducationexploitation+5

19 months ago

scan4secrets

m14r41/scan4secrets

Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…

code-analysisconfiguration-auditingcrawler+9

1231 month ago

CVE-2026

horkimhab/cve-2026

Educational collection of CVE proof-of-concept resources and vulnerability research material for authorized lab testing, defensive study, and secure…

ctfcurated-resourceseducation+4

6 days ago

Previous12…100 Next