Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2069 results

CVE-2021-45428-Defacer

projectforsix/cve-2021-45428-defacer

Python-based exploit for CVE-2021-45428, targeting a specific web application vulnerability for penetration testing and security assessment.

exploitationpayload-generationpenetration-testing+2

2 years ago

CVE-2024-25600

nanowraith/cve-2024-25600

Exploit for CVE-2024-25600, a web application vulnerability, enabling proof-of-concept testing and security assessment of affected systems.

exploitationinformation-gatheringpenetration-testing+2

2 years ago

CVE-2020-15169

glasses618/cve-2020-15169

Ruby-based exploit for CVE-2020-15169, demonstrating a specific web application vulnerability with proof-of-concept code for security testing and…

code-analysisexploitationpenetration-testing+2

5 years ago

cve-2021-24499

hh-hunter/cve-2021-24499

Exploit for CVE-2021-24499 targeting a specific web application vulnerability. Provides proof-of-concept code for security testing and vulnerability…

exploitationvulnerability-analysisweb-application-exploitation

4 years ago

IT19013756_-CVE-2016-4971-

dinidhu96/it19013756_-cve-2016-4971-

Exploit for CVE-2016-4971 targeting a web application vulnerability, providing proof-of-concept code for security testing and validation.

exploitationvulnerability-analysisweb-application-exploitation

6 years ago

Archived

AuraBorealisApp

iqtlabs/auraborealisapp

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data

code-analysismalware-analysisstatic-code-analysis+2

204 years ago

lazyweb

ramadhanamizudin/lazyweb

LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…

educationlabs-practicepenetration-testing+2

12819h 11m ago

Archived

exist

nict-csl/exist

EXIST is a web application for aggregating and analyzing cyber threat intelligence.

educationincident-responseinformation-gathering+6

1526 months ago

juice-shop

juice-shop/juice-shop

Intentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…

ctfeducationlabs-practice+3

13.9k1 month ago

crushftp_cve-2025-31161

rufflabs/crushftp_cve-2025-31161

Pre-built vulnerable CrushFTP 10.8.0 binary for authorized penetration testing of CVE-2025-31161, an unauthenticated authentication bypass…

authenticationexploitationlabs-practice+3

2 months ago

CVE-2024-24725-PoC

melkorw/cve-2024-24725-poc

Proof-of-concept exploit for CVE-2024-24725, demonstrating a web application vulnerability with PHP-based exploitation code for security testing and…

code-analysisexploitationpenetration-testing+2

11 year ago

cve-2019-3396

tno01/cve-2019-3396

Exploit for CVE-2019-3396 targeting a web application vulnerability. Designed for penetration testing and security assessment of affected systems.

exploitationpenetration-testingvulnerability-analysis+1

11 months ago

CVE-2021-22145-poc

niceeeeeeee/cve-2021-22145-poc

Proof-of-concept exploit for CVE-2021-22145, demonstrating a web application vulnerability with automated exploitation logic for security testing and…

exploitationpenetration-testingreconnaissance+2

3 years ago

TheMisfits-CVE-2024-8465-SQLi

19melek19/themisfits-cve-2024-8465-sqli

Intentionally vulnerable PHP web app demonstrating SQL injection authentication bypass and unauthorized data disclosure modeled after CVE-2024-8465…

ctfeducationlabs-practice+3

7 months ago

CVE-2021-40223

asang17/cve-2021-40223

XSS Vulnerability in Rittal

educationpenetration-testingvulnerability-analysis+2

5 years ago

CVE-2014-6287

jagg3rsec/cve-2014-6287

Exploit implementation for CVE-2014-6287, targeting a remote code execution vulnerability in a web application. Provides a proof-of-concept for…

exploitationpenetration-testingremote-access-tool+2

7 months ago

CVE-2023-30800_PoC_go

griffinsectio/cve-2023-30800_poc_go

Proof-of-concept exploit for CVE-2023-30800, demonstrating a web application vulnerability with a Go-based payload generator for security testing and…

exploitationpayload-generationpenetration-testing+2

2 years ago

CVE-2023-42793

whoamins/cve-2023-42793

Proof-of-concept exploit for CVE-2023-42793, targeting a specific web application vulnerability to demonstrate exploitation and aid in security…

exploitationinformation-gatheringpenetration-testing+2

2 years ago

Previous 1…345…100 Next