Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

66 results

VLC_CVE-2021-25804_Analysis

dshankle/vlc_cve-2021-25804_analysis

In-depth technical analysis of CVE-2021-25804, a VLC AVI parser vulnerability. Includes root cause, patch diff, and exploitation primitives for…

binary-analysiscode-analysiseducation+3

4 years ago

aegisgraph

577industries/aegisgraph

AegisGraph: graph-based application-layer assessment evidence platform for Secure Messaging Applications (SMAs). DARPA ASEMA HR0011SB20254-12 Tier 3…

binary-analysiscryptographycurated-resources+8

21 days ago

CVE-2023-21716

featherstark/cve-2023-21716

Technical analysis and proof-of-concept exploit for CVE-2023-21716, a heap corruption vulnerability in Microsoft Word's RTF font table parser…

binary-exploitationexploitationpayload-generation+2

43 years ago

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerability

Unauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…

data-exfiltrationexploitationinformation-gathering+4

32 years ago

poc-cve-2024-23897

vmtyan/poc-cve-2024-23897

Proof-of-concept exploit for CVE-2024-23897 enabling remote code execution on Jenkins instances via vulnerable args4j command-line parser. Written in…

exploitationpenetration-testingred-teaming+3

22 years ago

CVE-2016-4437

m3terpreter/cve-2016-4437

Proof-of-concept exploit for CVE-2016-4437, an Apache Struts2 remote code execution vulnerability. Demonstrates exploitation of the Jakarta Multipart…

exploitationvulnerability-analysisweb-application-exploitation

5 years ago

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

hunt-benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

Conceptual PoC for CVE-2025-54328, a critical zero-click stack buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser, enabling…

binary-exploitationeducationembedded-systems-security+5

12 months ago

CVE-2023-24329-lab

jithinodattu/cve-2023-24329-lab

Self-contained Docker lab demonstrating CVE-2023-24329, a Python urllib parser differential that bypasses URL scheme and host filters, with…

ctfeducationexploitation+4

4 months ago

IAMActionHunter

rhinosecuritylabs/iamactionhunter

An AWS IAM policy statement parser and query tool.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4

2001 year ago

CVE-2021-36934

preventions/cve-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

binary-exploitationexploitationprivilege-escalation+1

35 years ago

CVE-2020-5903

ltvthang/cve-2020-5903

Exploit for CVE-2020-5902 targeting F5 BIG-IP RCE via path traversal and JDBC deserialization, enabling command execution, file read/write, and…

exploitationpayload-developmentpenetration-testing+3

6 years ago

CVE-2017-5638

mritunjay-k/cve-2017-5638

An exploit for CVE-2017-5638

exploitationpayload-developmentpenetration-testing+2

3 years ago

oletools

decalage2/oletools

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

code-analysisdigital-forensicsforensics+3

3.4k7 months ago

Archived

whispers

skyscanner/whispers

Identify hardcoded secrets in static structured text

code-analysisconfiguration-auditingdevsecops+4

5052 years ago

Nessus_Map

ebryx/nessus_map

Parse .nessus file(s) and shows output in interactive UI

information-gatheringvulnerability-analysisvulnerability-scanners

1654 months ago

CVE-2017-8759

vysecurity/cve-2017-8759

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

exploitationpayload-developmentpenetration-testing+3

1768 years ago

CVE-2023-20052

nokn0wthing/cve-2023-20052

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

exploitationfuzzinginformation-gathering+2

293 years ago

CVE-2026-64638-WordPress-Core-XSS2Shell

renzi25031469/cve-2026-64638-wordpress-core-xss2shell

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos…

penetration-testingvulnerability-analysisvulnerability-scanners+2

323 days ago

Previous 1 234 Next