Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

418 results

CVE-2021-4034-new

rakhithjk/cve-2021-4034-new

Exploit for CVE-2021-4034 (polkit pkexec) that provides a root shell. Includes build instructions and references the original advisory.

binary-exploitationexploitationexploit-frameworks+2

4 years ago

CVE-2020-5903

ltvthang/cve-2020-5903

Exploit for CVE-2020-5902 targeting F5 BIG-IP RCE via path traversal and JDBC deserialization, enabling command execution, file read/write, and…

exploitationpayload-developmentpenetration-testing+3

6 years ago

alibaba__nacos_CVE-2021-44667_2-0-3

shoucheng3/alibaba__nacos_cve-2021-44667_2-0-3

Exploit for CVE-2021-44667 targeting Alibaba Nacos 2.0.3, enabling unauthenticated remote code execution via a crafted request to the Derby database…

cloud-securityexploitationmisconfiguration+3

1 year ago

cve-2025-5025

kiphuong/cve-2025-5025

Proof-of-concept exploit for CVE-2025-5025, demonstrating the vulnerability with a Docker-based environment for testing and validation.

exploitationpayload-developmentpenetration-testing+2

1 year ago

CVE-2018-9995-ModifiedByGwolfs

tateydq/cve-2018-9995-modifiedbygwolfs

Exploit for CVE-2018-9995 to retrieve DVR credentials via directory traversal, with two methods for educational use.

educationexploitationiot-security+3

7 years ago

JailedCement

iswaxan/jailedcement

Simple iOS bootlooper using CVE-2022-46689. Desguised as onlyfans

exploitationios-securitymobile-security+2

3 years ago

CVE-2014-6271

woltage/cve-2014-6271

Ansible playbook to test remote servers for CVE-2014-6271 (Shellshock) bash vulnerability, enabling automated scanning and verification across…

configuration-auditingexploitationpenetration-testing+1

12 years ago

CVE-2026-44963

horkimhab/cve-2026-44963

CVE-2026-44963 - Draft - Veeam

educationexploitationlabs-practice+2

3 months ago

CVE-2020-0601

markuszehnle/cve-2020-0601

PowerShell script to check Windows hotfix status for CVE-2020-0601 and detect exploitation attempts. Includes XML import for ControlUp Script-Based…

configuration-auditingexploitationscripting-automation+1

6 years ago

NextJS-CVE-2025-29927

enochgitgamefied/nextjs-cve-2025-29927

Intentionally vulnerable Next.js application demonstrating CVE-2025-29927 authentication bypass via middleware WAF evasion. Designed for security…

authenticationeducationlabs-practice+3

1 year ago

CVE-2007-2447-RCE

mikerega7/cve-2007-2447-rce

Samba 3.0.20

command-and-controlexploitationpayload-generation+3

3 years ago

Log4J_0day_RCE

wysiiwyg/log4j_0day_rce

Log4j-RCE (CVE-2021-44228) Proof of Concept

exploitationpayload-generationpenetration-testing+3

4 years ago

CVE-2019-20085

z3r0space/cve-2019-20085

A repository used for Hackthebox ServMon Machine

educationexploitationinformation-gathering+3

1 year ago

CVE-2019-19781-DFIR-Notes

azeemering/cve-2019-19781-dfir-notes

My Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.

curated-resourcesdigital-forensicseducation+5

3 years ago

cve-2020-1350

gdwnet/cve-2020-1350

A powershell script to deploy the registry mitigation key for CVE-2020-1350

configuration-auditingdns-analysisexploitation+3

6 years ago

SMBGhost-WorkaroundApplier

almorabea/smbghost-workaroundapplier

This script will apply the workaround for the vulnerability CVE-2020-0796 for the SMBv3 unauthenticated RCE

exploitationnetwork-securitypenetration-testing+2

6 years ago

CVE-2022-25765

lowercasenumbers/cve-2022-25765

Python PoC exploit for CVE-2022-25765, a critical command injection in PDFKit. Generates a reverse shell via unsanitized URL parameters passed to…

command-and-controlexploitationpayload-generation+3

10 months ago

CVE-2017-3881-Cisco

homjxi0e/cve-2017-3881-cisco

Proof-of-concept remote code execution exploit for CVE-2017-3881 affecting Cisco Catalyst switches with telnet enabled, including detailed exploit…

exploitationnetwork-securitypenetration-testing+3

9 years ago

Previous 1…202122…24 Next