Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

113 results

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

george0papasotiriou/cve-2026-23002-5g-nas-message-buffer-overflow-in-gnodeb

Simulated 5G gNodeB NAS parser with stack buffer overflow PoC for CVE-2026-23002; a crafted NAS message triggers remote code execution.

binary-exploitationembedded-systems-securityexploitation+2

20 days ago

CVE-2014-4481

feliam/cve-2014-4481

Proof-of-concept exploit for Apple CoreGraphics CCITT heap overflow (CVE-2014-4481) enabling arbitrary code execution in Mobile Safari via crafted…

binary-exploitationexploitationios-security+3

511 years ago

CVE-2022-21971-Windows-Runtime-RCE

tufanturhan/cve-2022-21971-windows-runtime-rce

Proof-of-concept exploit for CVE-2022-21971, an uninitialized pointer free vulnerability in Windows Runtime's prauthproviders.dll, triggered via…

binary-exploitationdebuggersexploitation+3

24 years ago

CVE-2019-12086

al1ex/cve-2019-12086

Exploit for CVE-2019-12086, a Jackson deserialization vulnerability, using a rogue MySQL server to read arbitrary files from vulnerable applications.

database-securityexploitationpayload-generation+2

16 years ago

CVE-2024-55968

wi1dn00b/cve-2024-55968

Proof-of-concept exploit for CVE-2024-55968, a macOS local privilege escalation via an unvalidated XPC helper in DTEX Event Forwarder, abusing the…

binary-exploitationexploitationpenetration-testing+2

21 year ago

CVE-2025-66849

wojtekchwala/cve-2025-66849

Proof-of-concept exploit for a stored XSS vulnerability in Ghost CMS (CVE-2025-66849) enabling privilege escalation from Contributor to Owner via…

exploitationpayload-developmentpenetration-testing+3

4 months ago

CVE-2026-5203

caginkyr/cve-2026-5203

Exploit for CVE-2026-5203 in CMS Made Simple, leveraging path traversal and arbitrary file upload to achieve remote code execution with an…

exploitationpayload-generationpenetration-testing+2

3 months ago

CVE-2023-51764-POC

d4op/cve-2023-51764-poc

Python 3 proof-of-concept for CVE-2023-51764 SMTP smuggling vulnerability, enabling email spoofing via crafted SMTP sessions.

email-securityexploitationpayload-development+2

12 years ago

CVE-2025-56499

cherrling/cve-2025-56499

Proof-of-concept exploit for CVE-2025-56499, demonstrating arbitrary file read via missing path validation in mihomo's rule-provider configuration,…

exploitationinformation-gatheringlog-analysis+3

9 months ago

CVE-2022-45299

offalltn/cve-2022-45299

Proof-of-concept exploit for CVE-2022-45299, demonstrating arbitrary command execution via unfiltered URL input in the webbrowser-rs library before…

command-and-controlexploitationpayload-development+2

11 year ago

CVE-2025-63914

wxdou/cve-2025-63914

Public disclosure and patch for CVE-2025-63914, a zip bomb vulnerability in Cinnamon/kotaemon, including PoC and mitigation.

exploitationvulnerability-analysisweb-security

8 months ago

cve-2019-5737

beelzebruh/cve-2019-5737

Exploit for CVE-2019-5737, a Docker runc container escape vulnerability, with build and run instructions for Linux and Windows.

cloud-securitycontainer-escapecontainer-security+3

7 years ago

CVE-2013-3664_BMP

defrancescojp/cve-2013-3664_bmp

Proof-of-concept exploit for CVE-2013-3664: heap overflow in SketchUp BMP RLE4 texture parsing enabling arbitrary code execution via malicious .skp…

binary-exploitationexploitationfuzzing+2

6 years ago

CVE-2019-5736

si1ent-le/cve-2019-5736

Proof-of-concept exploit for CVE-2019-5736, a Docker container escape via runc binary overwrite, enabling host shell access through libseccomp…

binary-exploitationcontainer-escapeexploitation+3

4 years ago

Archived

CVE-2022-21974

0vercl0k/cve-2022-21974

PoC and root-cause analysis for CVE-2022-21974, an uninitialized pointer free in RMSRoamingSecurity that yields remote code execution via crafted RTF…

binary-exploitationdebuggersexploitation+3

574 years ago