Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

299 results

CVE-2022-36804

notdls/cve-2022-36804

A real exploit for BitBucket RCE CVE-2022-36804

exploitationpenetration-testingred-teaming+3

352 years ago

CrestCrack

vpnguy-zz/crestcrack

Exploits CVE-2016-5640 / CLVA-2016-05-002 against Crestron AM-100

exploitationpenetration-testingremote-access-tool+2

79 years ago

CVE-2026-72898-safe-detection

franc-zar/cve-2026-72898-safe-detection

Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)

penetration-testingvulnerability-analysisvulnerability-scanners+2

1 month ago

SimpleCTF-THM-Walkthrough

paulameg/simplectf-thm-walkthrough

First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web…

ctfeducationpassword-cracking+5

14 months ago

CVE-2022-0739

chris01s/cve-2022-0739

Simple bash script to automate the exploit of cve 2022 0739

exploitationpenetration-testingvulnerability-analysis+1

43 years ago

CVE-2019-9053

bjarneverschorre/cve-2019-9053

Python script that exploits CVE-2019-9053, a SQL injection vulnerability in CMS Made Simple, to extract data from the database.

exploitationinformation-gatheringpenetration-testing+2

2 years ago

CVE-2020-18326

hamm0nz/cve-2020-18326

Proof-of-concept exploit for CVE-2020-18326 demonstrating Cross-Site Request Forgery (CSRF) in Subrion CMS 4.2.1 to create an unauthorized…

educationexploitationpenetration-testing+2

4 years ago

CVE-2020-13158

infosec4fun/cve-2020-13158

CVE-2020-13158 - Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal

exploitationinformation-gatheringpenetration-testing+3

16 years ago

CVE-2020-15052

pratikshad19/cve-2020-15052

Artica Proxy before 4.30.000000 Community Edition allows SQL Injection.

database-securityexploitationpenetration-testing+2

16 years ago

CVE-2020-18324

hamm0nz/cve-2020-18324

Proof-of-concept exploit demonstrating a reflected XSS vulnerability in Subrion CMS 4.2.1 via the Kickstart template search parameter, enabling…

exploitationpenetration-testingvulnerability-analysis+2

14 years ago

CVE-2020-15053

pratikshad19/cve-2020-15053

Artica Proxy before 4.30.000000 Community Edition allows Reflected Cross Site Scripting.

educationinformation-gatheringpapers-research+3

6 years ago

CVE-2020-13159

infosec4fun/cve-2020-13159

CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows OS command injection.

command-and-controlexploitationpenetration-testing+2

6 years ago

CVE-2020-18325

hamm0nz/cve-2020-18325

Proof-of-concept exploit for reflected XSS vulnerabilities in Subrion CMS v4.2.1 configuration panel, demonstrating JavaScript injection via POST…

educationexploitationpenetration-testing+3

4 years ago

blindy

agienka/blindy

Simple script to automate brutforcing blind sql injection vulnerabilities

penetration-testingvulnerability-analysisweb-application-exploitation

509 years ago

CVE-2023-42326

bl4ckarch/cve-2023-42326

This is a simple POC to for show the pfsense 2.7 Command injection Vulnerability ( CVE-2023-42326)

command-and-controlexploitationpayload-generation+3

41 year ago

CVE-2009-0473-check

akbarq/cve-2009-0473-check

Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A

exploitationpenetration-testingscada-ics-security+2

33 years ago

cmsms-sqli

tim-karov/cmsms-sqli

Python3 exploit for CVE-2019-9053 (CMS Made Simple <= 2.2.9 SQLi). No deps, time-based blind SQLi → admin creds dump. HTB Writeup owned.

ctfexploitationpassword-cracking+3

8 months ago

CVE-2025-55182

j4ck3lsyn-gen2/cve-2025-55182

A simple toolkit to validate, exploit & gain an interactive shell via the react2Shell Next.js RCE.

command-and-controleducationexploitation+5

6 months ago

Previous 1 234…17 Next