Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

280 results

CVE-2025-64512

stoic-crawler/cve-2025-64512

Exploit for CVE-2025-64512 to get a reverse shell.

educationexploitationpayload-development+3

2 months ago

CVE-2018-6574-go-get-RCE

malone5923/cve-2018-6574-go-get-rce

CVE-2018-6574: go get RCE solution for pentesterlab challenge

educationexploitationlabs-practice+2

16 years ago

CVE-2017-1000367

homjxi0e/cve-2017-1000367

Proof-of-concept exploit for CVE-2017-1000367, a local privilege escalation vulnerability in Sudo's get_process_ttyname() on Linux, allowing…

binary-exploitationexploitationpenetration-testing+3

19 years ago

CVE-2018-6574

devang-solanki/cve-2018-6574

Exploit for remote command execution in Golang go get command.

binary-exploitationexploitationpayload-development+3

14 years ago

CVE-2022-46169

0xn7y/cve-2022-46169

Exploit for CVE-2022-46169

authentication-authorizationcommand-and-controlexploitation+3

12 years ago

VMware-CVE-2022-22954

lucksec/vmware-cve-2022-22954

Proof-of-concept exploit for CVE-2022-22954, a server-side template injection in VMware Workspace ONE Access Freemarker, enabling remote code…

exploitationpenetration-testingreconnaissance+2

4 years ago

CVE-2022-43293

lucabarile/cve-2022-43293

Exploit and report for CVE-2022-43293

educationexploitationpenetration-testing+1

3 years ago

CVE-2024-12856

nu113d/cve-2024-12856

An exploit for Four-Faith routers to get a reverse shell

exploitationpenetration-testingremote-access-tool+2

31 year ago

CVE-2025-47812-poC

0xcan1337/cve-2025-47812-poc

Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.

educationexploitationpayload-generation+3

131 year ago

AVideo3xploit

al-sultani/avideo3xploit

RCE exploit for AVideo < 8.9 (CVE-2020-23489 & CVE-2020-23490)

exploitationpenetration-testingred-teaming+2

25 years ago

CVE-2017-8056

itzexploit/cve-2017-8056

Python-based exploit for CVE-2017-8056 targeting XML-RPC denial-of-service vulnerability in web applications.

exploitationpenetration-testingvulnerability-analysis+1

1 year ago

VMware-CVE-2022-22954

nieldk/vmware-cve-2022-22954

Proof-of-concept exploit for CVE-2022-22954, a Freemarker server-side template injection in VMware Workspace ONE Access, with a one-line GET request…

exploitationinformation-gatheringreconnaissance+2

4 years ago

CVE-2002-0748

fauzanwijaya/cve-2002-0748

Proof of concept for LabVIEW Web Server HTTP Get Newline DoS vulnerability

exploitationpenetration-testingvulnerability-analysis+1

3 years ago

CVE-2025-66947

kabir0104k/cve-2025-66947

Proof-of-concept for time-based blind SQL injection in a PHP admin panel. Demonstrates exploitation via unsanitized GET parameter, with mitigation…

database-securityeducationpenetration-testing+2

19 months ago

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

duc-nt/cve-2022-44268-imagemagick-arbitrary-file-read-poc

PoC payload generator for CVE-2022-44268 ImageMagick arbitrary file read vulnerability. Demonstrates exploitation via crafted PNG files for…

educationexploitationpayload-generation+3

2753 years ago

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

theopaid/cve-2026-66750-insufficient-access-controls-allow-for-unauthorized-file-downloads-let-s-chat-

Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)

authentication-authorizationeducationmisconfiguration+2

1 month ago

CVE-2009-5147

vpereira/cve-2009-5147

poc for CVE-2009-5147

binary-exploitationexploitationpayload-development+2

9 years ago

CVE-2014-7911-CVE-2014-4322_get_root_privilege

koozxcv/cve-2014-7911-cve-2014-4322_get_root_privilege

CVE-2014-7911 vulnerability and CVE-2014-4322 vulnerability to get root privilege！

android-securitybinary-exploitationexploitation+4

210 years ago

Previous 1 234…16 Next